@Named("role") String role, User user) {
try {
ensureRole(user, Role.PORTAL_ADMIN);
UserRepository repository = new UserRepository();
UserProp prop = repository.changeUserPermission(email, role, true);
return new APIResponse(Status.SUCCESS, prop);
} catch (Exception ex) {
return new APIResponse(ex);
}