Moved role constraints into model and removed edit deployment

(cherry picked from commit b6becfa8eb113ad5b4a7826192e2d18342b6c532)