Simple php access control by roles and lists