BaseModelsController, fix authorisation handling in RolesController