booking: limit booking access by role.