== Permission & Ownership object ==
We need a generic permission & ownership object which can be added to all service creation and modification requests. The following points needs to be clarified:
* Is this object always mandatory, or can the roles be defined via some clever inherited default values if it's missing.
* Which roles are available and can be set on which level
* Which informations apart from the user (people) and the role name are necessary?
* Do we want to reference the location URI or the UID of a role
<source lang="javascript">
"roles":