also, if you're referencing

->user

under a role, you probably want that role to point to the user directly