[testFaceRest] Fix inappropriate userId in assertUpdateRecord()
[testFaceRest] Add test_updateUserRoleWithoutPrivilege()