Make RoleOwner and RoleReader type ACLRole instead of ideal constants.