role_required checks if role failed