code: @GET
      public Iterator<EmoRole> getAllRoles(final @Authenticated Subject subject) {
          return _uac.getAllRoles(subject);
      }
docs: Returns all roles for which the caller has read access.  Since the number of roles is typically low
  this call does not support "from" or "limit" parameters similar to the system or record.