#2 - load role permissions from model.