Implemented authorization by roles