pub fn user_has_role(username: &str, role_name: &str) -> bool
Check if a user is allowed to use a given role.