next db version is 2.2
we need roles in the policy, don't we ...