Merki viðbótar: user role restriction