Add role checks for operations