ds-roles
ds-roles copied to clipboard
define `canCall` and others in terms of overrideable functions
e.g. use isUserRoot
internally instead of querying storage