integer-underflow
diff --git a/‎coderd/apidoc/docs.go
+82-5 b/‎coderd/apidoc/docs.go
+82-5
diff --git a/‎coderd/apidoc/swagger.json
+82-5 b/‎coderd/apidoc/swagger.json
+82-5
diff --git a/‎coderd/audit.go
+2-2 b/‎coderd/audit.go
+2-2
diff --git a/‎coderd/coderd.go
+3-1 b/‎coderd/coderd.go
+3-1
@@ -196,12 +196,12 @@ func (api *API) convertAuditLog(ctx context.Context, dblog database.GetAuditLogs
 				CreatedAt: dblog.UserCreatedAt.Time,
 				Status:    codersdk.UserStatus(dblog.UserStatus.UserStatus),
 			},
-			Roles: []codersdk.Role{},
+			Roles: []codersdk.SlimRole{},
 		}
 
 		for _, roleName := range dblog.UserRoles {
 			rbacRole, _ := rbac.RoleByName(roleName)
-			user.Roles = append(user.Roles, db2sdk.Role(rbacRole))
+			user.Roles = append(user.Roles, db2sdk.SlimRole(rbacRole))
 		}
 	}
 
 
@@ -61,6 +61,7 @@ import (
 	"github.com/coder/coder/v2/coderd/provisionerdserver"
 	"github.com/coder/coder/v2/coderd/rbac"
 	"github.com/coder/coder/v2/coderd/rbac/policy"
+	"github.com/coder/coder/v2/coderd/rbac/rolestore"
 	"github.com/coder/coder/v2/coderd/schedule"
 	"github.com/coder/coder/v2/coderd/telemetry"
 	"github.com/coder/coder/v2/coderd/tracing"
@@ -631,6 +632,7 @@ func New(options *Options) *API {
 		httpmw.AttachRequestID,
 		httpmw.ExtractRealIP(api.RealIPConfig),
 		httpmw.Logger(api.Logger),
+		rolestore.CustomRoleMW,
 		prometheusMW,
 		// Build-Version is helpful for debugging.
 		func(next http.Handler) http.Handler {
@@ -915,7 +917,7 @@ func New(options *Options) *API {
 				r.Post("/logout", api.postLogout)
 				// These routes query information about site wide roles.
 				r.Route("/roles", func(r chi.Router) {
-					r.Get("/", api.assignableSiteRoles)
+					r.Get("/", api.AssignableSiteRoles)
 				})
 				r.Route("/{user}", func(r chi.Router) {
 					r.Use(httpmw.ExtractUserParam(options.Database))
Original file line number	Diff line number	Diff line change
`@@ -196,12 +196,12 @@ func (api *API) convertAuditLog(ctx context.Context, dblog database.GetAuditLogs`
`196`	`196`	`CreatedAt: dblog.UserCreatedAt.Time,`
`197`	`197`	`Status: codersdk.UserStatus(dblog.UserStatus.UserStatus),`
`198`	`198`	`},`
`199`		`- Roles: []codersdk.Role{},`
	`199`	`+ Roles: []codersdk.SlimRole{},`
`200`	`200`	`}`
`201`	`201`
`202`	`202`	`for _, roleName := range dblog.UserRoles {`
`203`	`203`	`rbacRole, _ := rbac.RoleByName(roleName)`
`204`		`- user.Roles = append(user.Roles, db2sdk.Role(rbacRole))`
	`204`	`+ user.Roles = append(user.Roles, db2sdk.SlimRole(rbacRole))`
`205`	`205`	`}`
`206`	`206`	`}`
`207`	`207`