I figured this out. The problem was due to the fact that I was getting the Role instances from another Restlet Resource, so they were just proxy instances and not actual Role instances. To fix it, I instantiated real Role objects from the proxies I got back from the other service.
------------------------------------------------------ http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2940307
