Simple php access controll by roles and lists