Moved role constraints into model and removed edit deployment

As the discussion on IRC shows that it's not really needed i'm removing this single assignment to keep it simple and clean.