CredentialRequest_init can be called by Anonymous, that will not have Owner role.

bt5/erp5_credential/SkinTemplateItem/portal_skins/erp5_credential/CredentialRequest_init.xml

@@ -83,6 +83,7 @@ pass\n
             <key> <string>roles</string> </key>
             <value>
               <tuple>
+                <string>Anonymous</string>
                 <string>Owner</string>
               </tuple>
             </value>