Why not check if the requests really worked (by testing if the user actually has or no longer has the permissions)?