added role check for all resources