Bugfix: users#grant and #revoke didn't work for local roles when a global role was present.