added roles and permissions to users