Implemented user role change behavior.
extended user and privilege api controllers.