#1 UserRole constraints + UserRoleSpec test