In addition to the current role mapper implementation it would be useful to have implementation(s) that can handle logical operations i.e. and, or, xor.

Not sure at this point if it makes sense for this to be single implementations or a single mapper that can be provided a set of operations to perform.