#26 refact for user of rbac