Fyi, adding a simple constraint mechanism for roles, scoping to the values stored inside properties:
https://issues.apache.org/jira/browse/FC-235 I’ve got a prototype working in a sandbox. Have to clean it up, but will be checked into trunk soon. Shawn
