handle requireAnyRole and requireAllRoles