code: def deny_role(role):
      
      def processor(action, argument):
          db.session.add(
              ActionRoles.deny(action, argument=argument, role_id=role.id)
          )
      return processor
docs: Deny a role identified by an email address.