How would you approach testing a role-based model with aliases, where a user can have up to 20 aliases in different combinations that allow or disallow operations?