Moved role constraints into model and fixed typo

The same as https://github.com/SUSE-Cloud/barclamp-suse-manager-client/pull/12