[roles] controller: Fixed setting permissions

flaschengeist/controller/roleController.py

@@ -44,12 +44,11 @@ def update_role(role, new_name):
 
 
 def set_permissions(role, permissions):
-    role.permissions.clear()
     for name in permissions:
         p = Permission.query.filter(Permission.name.in_(permissions)).all()
         if not p or len(p) < len(permissions):
             raise BadRequest("Invalid permission name >{}<".format(name))
-        role.permissions.extend(p)
+        role.permissions = list(p)
     db.session.commit()