Moved role constraints into model and removed edit deployment

(cherry picked from commit 17a1122a06dca6d2cb9fc1b16934f906bfb0fdfd)