[Bug 828256] VUL-0: CVE-2013-3703: obs-server: No write permission check in change_role command