fail on user submitting no role edits, to avoid false positives