AppWithRolesForUser sonar security issue