Moved role constraints into model and removed edit deployment

(cherry picked from commit aa6290199261400be0f71dd5d638f384fb467f02)