Added user/id/roles to the new access check