role security fix