The Importance of User Roles and Permissions for Site Security