roles can now be used for non-admin modules by implementing the iRestrictedAccess interface.  iAdminModule already extends that interface (all admin modules are roll driven).