append check <user|group> has role on <project|domain>, and test code

Signed-off-by: Kouhei Maeda <mkouhei@palmtb.net>