如果add_roles和remove_roles不会导致更改，它们是否会“攻击”不一致服务？

from flask import Flask, request, jsonify

app = Flask(__name__)

# 假设有一个简单的角色管理系统
roles = {}

@app.route('/add_role', methods=['POST'])
def add_role():
    data = request.get_json()
    user_id = data['user_id']
    role = data['role']
    if user_id in roles:
        roles[user_id].append(role)
    else:
        roles[user_id] = [role]
    return jsonify({"status": "success", "message": f"Role {role} added to user {user_id}"})

@app.route('/remove_role', methods=['POST'])
def remove_role():
    data = request.get_json()
    user_id = data['user_id']
    role = data['role']
    if user_id in roles and role in roles[user_id]:
        roles[user_id].remove(role)
        return jsonify({"status": "success", "message": f"Role {role} removed from user {user_id}"})
    else:
        return jsonify({"status": "failure", "message": f"Role {role} not found for user {user_id}"})

if __name__ == '__main__':
    app.run(debug=True)