validate method instead.

Use new getRoles function to get object roles, rather than using
__roles__ attribute.