implement role management with restful architecture style