Bug fixes (#355)

* we should not require password to update users

* Fixing an issue were roles would not be added.

lemur/users/schemas.py

@@ -14,7 +14,7 @@ from lemur.schemas import AssociatedRoleSchema, AssociatedCertificateSchema, Ass
 class UserInputSchema(LemurInputSchema):
     username = fields.String(required=True)
     email = fields.Email(required=True)
-    password = fields.String(required=True)  # TODO add complexity requirements
+    password = fields.String()  # TODO add complexity requirements
     active = fields.Boolean()
     roles = fields.Nested(AssociatedRoleSchema, many=True, missing=[])
     certificates = fields.Nested(AssociatedCertificateSchema, many=True, missing=[])

lemur/users/service.py

@@ -29,8 +29,8 @@ def create(username, password, email, active, profile_picture, roles):
         email=email,
         active=active,
         profile_picture=profile_picture,
-        role=roles
     )
+    user.roles = roles
     return database.create(user)