added function areAnyRolesAllowed (without tests)