role_params should be private