Added condition around params to ensure no role except administrator can update role