role adding
permissions in controllers