adding role constraint to check roles on individual properties; only checks to see if they exist in DB or not... no auth being done.