enhanced role permission validation