my @roles = $self->authz->get_roles( $user );