Added authorization rules for different roles.