Added some restrictions for editing roles
closes #28