I have the requirement that only certain user roles should be allowed to log in. The set of roles may change at runtime.
