rework for role service accesses tracking scripting permissions