Add test for has_membership_changes? when changing grants without changing calculated roles