• Can you check if the user has added to the role

    db_denydatawriter