use OpenURRole instead of IRole in implementations(!) of
domain-objects