lots of roles and permissions related changes