add user role checking