Implement rules with deny chain roles, wrote tests for it

Andrey Veltischev requested to merge den/implement-deny-chain-roles into master

Merge request reports