Fix roles permissions