changes to permissions.py for pulling roles for the logged in user