@ModelAttribute("allRoles")
 @PreAuthorize("hasAnyRole('CTRL_PERM_LIST_GET','CTRL_PERM_EDIT_GET')")
 public List<Role> getAllRoles() {
   return roleService.getRoles();
 }