Tweak isAllowed/isDenied methods with role param