added dto and controllers for role and permissions