more work on the role restriction editor