working on user role control