Moved role constraints into model and removed edit deployment

(cherry picked from commit 04abeabde6a64fc0c77850c3d892544805eee6f0)