1=1 AND NOT EXISTS (SELECT 1 FROM sys_role_user r WHERE r.user_id=a.user_id)
AND NOT EXISTS (SELECT 1 FROM sys_role_user r WHERE r.user_id=a.user_id AND r.role_id=#{outRoleId})
AND EXISTS (SELECT 1 FROM sys_role_user r WHERE r.user_id=a.user_id AND r.role_id=#{inRoleId})