Promises

User.update({ id: id }, user)
            /**
             * Deal with Permissions
             */
            .then( function(result){
                return UserRole.destroy({user: id}); // Drop Permissions
            })
            .then( function(result){
                var promises = [];
                user.permissions.forEach( function(role){
                    var userRole = Role.findOne({name: role})
                        .then(function(role){
                            console.log(role);
                            return UserRole.create({user: id, role: role.id});
                        });
                    promises.push(userRole);
                });
                return promises;
            })
            .spread( function(){
                User.publishUpdate(id, user);
                return res.json('User Updated');
            })
            .catch( function(err){
                res.json(409, err);
            });