Applying the Roles and Profiles Method to Compliance Code