Added role based permissions to Ability model and validation for role, w...

...ith test
Needs to be `ServiceRequest` with no underscore