At the moment a role with no permissions still has view permissions (Since there are no view permissions currently on a role level). Adding view permission control to roles will allow you to have very 'unprivileged' roles which then you can 'whitelist' on specific assets to allow very controlled access.
This is a spin off from the changes in issue #89.