Replace authz fns with roles.py ones
STUD-1006