Correct role assignent and unassignent with subtree limit