The roles checkboxes really only mean something when the node is Private, so if Public is checked, the roles checkboxes should probably all be greyed out.