roleMixin.js: add validation for changing role