https://userapps.support.sap.com/sap/support/knowledge/en/3478521
3478521 - XS Classic design time role (hdbrole) security flaw using SAP HANA Studio | SAP Knowledge...
When creating a design-time role, theoretically, a user with authorization to create and activate repository objects can change a role that he has been granted.