add work roles to users, implemented by RoleUser component and MyAccessControl filter