adds per role items constraint