added permission for the role param