https://blog.hawktesters.com/mixing-boolean-flags-with-role-based-access-control/