Having the ability to use system roles (from the advanced permissions button in the 'set save' options tab should be managed at an Adnmin level and not an end user level.  Currently the end user has the ability to change the advanced permissions (for their query) from "all roles" to "selected roles" and choosing which system roles can run and/or edit their query.