Right now role is assigned to a user only once. But to be able to change roles for users, it would be great to check \w GH if the role has been changed and store it in DB on every login.