user role acl
 - use kCurrentContext::getCurrentKsKuser instead of ks_kuser
 - moved partner and ks existence to getRoleIds