Now allows DML operations based on role constraints.