added tests for roles in dsl