Default Role Implementation

I don't think one should be able to set as a default a role that he cannot set. in other words, one should only be able to set granted roles as default.