Added basic rules for authorization as per the roles