added a role to user to store permissions
added user abilities in the form of roles, and tested their beghavoiurs