Build an integration test that deletes role of the user on the project and verifies that:
- listing roles of the user on the project does not return the revoked role
- new auth does not obtain the role
- existing auth (before the revoked) is not accepted anymore