added roles + restricted viewing