Changing security to be role based for all end-user interfaces