Role with division assigned should only access its own administrative division Linked to issue #1 (closed)