Security cleanups in access roles and db_pager.