Have the ability to cancel or discard unpublished security role configuration.

If we have established security roles assigned to many users and if we mistakenly update a duty/privilege that all these roles reference, we now have both the duty/privilege change along with all the roles that reference that duty/privilege as entries in the Unpublished Objects tab.

The suggested workaround solution is to publish these changes and then, reverse the change, and then republish the subsequent undoing changes. Or reimport previous role configuration.

Simply pressing cancel would be better than commiting unwanted changes.