rbac\DbManager::getRolesByUser() returns not only the Roles but the assigned Permissions too.

[iromk]

I expected that method (because of unambiguous name) gives me only Roles for user_id.
In fact it doesn't count on value of the item_type.
I suppose it could be fixed as follows:

        $query = (new Query)->select('b.*')
            ->from(['a' => $this->assignmentTable, 'b' => $this->itemTable])
            ->where('{{a}}.[[item_name]]={{b}}.[[name]]')
            ->andWhere(['a.user_id' => (string) $userId])
            // FIX: and only the roles
           ->andWhere('{{b}}.[[type]]='.Item::TYPE_ROLE);

[samdark]

Fixed. Thanks for report.