introduced application roles without jpa mapping