moving hard coded roles to publisher.json