Hi Greg;
Are you using the UserBase class (DevForce's Default IPrincipal implementation)? This class will serialize the roles back to the client.
If you have a custom IPrincipal implementation instead, you need to make sure that the roles are serialized as part of the data contract.