Macro withdraw_roles 

macro_rules! withdraw_roles {
    {$($role:ident => $rule:expr;)*} => { ... };
}