Working Specs for RoleControl

Involved way too much reading of Arel and ActiveRecord source