Update functions

Security fix: in function hide_nfa()
More logical role check