Authenticated role escalation via unchecked assignment

Improper authorization in Invoice-System allows remote authenticated users to assign elevated roles via the /user handler. The handler accepts a request-controlled role value during a user update without checking whether the session may assign that role. A valid low-privileged session is required, and exploitation changes application authorization without disclosing data or interrupting service.