Sorry, but that doesn't make much sense.

We have a function (s3_has_role) that accepts UUIDs, but even better is to use the system roles IDs from session. A DB lookup is neither necessary here nor is it desirable to spread out Auth table queries.