As far as I know, I dont think its possible to get the list of module roles.
If you can explain a bit about why you want to do that, then the forum can help you find another solution for the same.
You would need to use the Mendix SDK for this. It’s not available at runtime so it is only usable at part of your development process.
No, and no. But I do have a service for you that might perfectly fit your purpose, Appsec by cinaq.com: https://cinaq.com/appsec/