static util methods for easy access to users and roles from a policy,
and for easy access to granted and forbidden constraints from a
constraint set