Check role instead of user name for authorization.