realize dao methods, add check roles in controllers