@RequestMapping(value = "/user/userDeleteRole.do", method = RequestMethod.POST)
public ModelAndView deleteRoles(@ModelAttribute("userForm") UserForm userForm, BindingResult result, SessionStatus status, HttpSession session, HttpServletRequest request) throws Exception {
log.debug("deleteRoles");
ZeroView view = new ZeroView(getMessages(), request.getLocale());
ZeroUser user = (ZeroUser) getUser();
if (user.checkAuthorisation(UserModule.AUTH_USER)) {
ZeroUser selectedUser = (ZeroUser) session.getAttribute(SESSION_USER_SELECTEDUSER);
try {
for (String roleId : userForm.getSelectedRoles().keySet()) {
log.info("roleId: " + roleId);