don't check roles when not admin for attr