client page authorization by client roles