ECL-332: support for authorization with user roles (admin...)