see UserOwnRole#self_role_for_user :)