check roles status before accepting ent request

[simonredfern]

We need to check the user has create role and delete entitlmement request before doing the action.

Else we end up in inconsistant state.