EZP-21703: added validation of role limitations
EZP-21703: tested assignRoleToUser() and assignRoleToUserGroup()
EZP-21703: improved validation by adding pathString  comparison