From 9142f8e1b2a8483aa00b04941a2171e093bed5ad Mon Sep 17 00:00:00 2001
From: Leopoldadmin <leopold.hammerschmidt@media-on.de>
Date: Mon, 20 Jul 2026 23:13:47 +0000
Subject: [PATCH] Pass denied_permissions through in role create/update routes

---
 app/routes/roles.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/app/routes/roles.py b/app/routes/roles.py
index b3ec573..938c4b5 100644
--- a/app/routes/roles.py
+++ b/app/routes/roles.py
@@ -137,6 +137,7 @@ async def create_role(
         tenant_id,
         body.name,
         body.permissions,
+        body.denied_permissions,
         body.field_permissions,
     )
     return JSONResponse(
@@ -145,7 +146,9 @@ async def create_role(
             "id": str(role.id),
             "name": role.name,
             "permissions": role.permissions,
+            "denied_permissions": role.denied_permissions,
             "field_permissions": role.field_permissions,
+            "permission_version": role.permission_version,
         },
     )
 
@@ -172,6 +175,7 @@ async def update_role(
         rid,
         body.name,
         body.permissions,
+        body.denied_permissions,
         body.field_permissions,
     )
     if role is None:
@@ -192,7 +196,9 @@ async def update_role(
         "id": str(role.id),
         "name": role.name,
         "permissions": role.permissions,
+        "denied_permissions": role.denied_permissions,
         "field_permissions": role.field_permissions,
+        "permission_version": role.permission_version,
     }