for files only show role assignments that can download
clean up for role display (showing where role assignment comes from)