code: private boolean canReadRoleInOu(CmsOrganizationalUnit ou, CmsRole role) {
  
          if (ou.hasFlagWebuser() && !role.getRoleName().equals(CmsRole.ACCOUNT_MANAGER.getRoleName())) {
              return false;
          }
          return true;
      }
docs: Helper method to check whether we should bother with reading the group for a given role in a given OU.<p>
  
  This is important because webuser OUs don't have most role groups, and their absence is not cached, so we want to avoid reading them.
  
  @param ou the OU
  @param role the role
  @return true if we should read the role in the OU