PSA: RoleService#getRoles returns the collection of RoleImpl

It returns the collection of RoleImpl objects instead of Role to ensure
that the service implementations do not return attached data access
objects.

Signed-off-by: Mario Krizmanic <mario.krizmanic@gmail.com>