new D_AllowedRoles, was simplified authentication and authorization