#2 - acl->addRoleFromModel and tests.