@stilesb this functionality should be in the role manager, the developer does not need to know that we use account level roles when the project one does not exist, the role manager should just return the correct permissions for the correct context.  Also, most users will not have account level roles.