data model: onRemove event
start to have built-in roles for users