anchor.diff:      end.
   
   validate_roles(Roles, Config) ->
  -    Definitions = get_definitions(Config),
  +    Definitions = get_definitions_filtered_for_rest_api(Config),
       UnknownRoles = [Role || Role <- Roles,
                               not validate_role(Role, Definitions, Config)],
       case UnknownRoles of
  
positive.code:             roles_spock();
          false ->
              roles_45()
      end.
  
  -spec object_match(rbac_permission_object(), rbac_permission_pattern_object()) ->
  
negative.code: roles_spock() ->
      [{admin, [],
        [{name, <<"Admin">>},
         {desc, <<"Can manage ALL cluster features including security.">>},
         {ce, true}],
        [{[], all}]},
       {ro_admin, [],
        [{name, <<"Read Only Admin">>},
         {desc, <<"Can view ALL cluster features.">>},
         {ce, true}],
        [{[{bucket, any}, password], none},
         {[{bucket, any}, data], none},
         {[admin, security], [read]},
  