Fix #8: double role assignment check works properly