erp5_web_renderjs_ui: security roles should not be in generic bts