Fix permission path for customer role lookup