Changes

*'''Do not encapsulate the whole syntax''' – This syntax always returns a value, either true or false which mostly would not cause any problems for example in sslogic or visibility conditions. However encapsulation of the syntax would basically return a string which is useless if not equalled to another string.

*'''Do not encapsulate the role name''' – This I believe is looping the role names in the instance and tries to match what is in the brackets. Use the exact role name without encapsulating.