check/uncheck role authority