some fixes on roles service