fixing menu permissions to allow multiple roles