Moved role constraints into model and removed edit deployment

(cherry picked from commit 6af9728f3ea5cba675f3c29de4f3bb59a132ac94)