We can not check for roles as they are pre-inserted in the (db) migration files - we count perm. rules for admins & everyone