Bugfixes and role security on CMS model level