Provide a data role injection point where a different implementation could be used for role validation. This interface would provide full control of the validation, instead of receiving parts of the sql to validate. As per our meeting, Steve can probably describe this feature better and talk to the true requirement.