The roleIDs are coming in as json string from the metadata context and can be extracted
using a helper function from the roles middleware. Instead of re-loading
those roleIDs again on every permission related request, we now just use
the roleIDs from the context. This is also more future-proof for when we
decide to move away the role assignments from the settings service into
the accounts service.
Benedikt Kulmann
ec89de9130