[BISERVER-10129] - Any user can view list of all users, roles and ACES v...

...ia REST

Found a bug in the get roles code, while working on this Jira case. This commit fixes the issue.