[arctic] - RESTful API for role/privelege/criteria