Replace a role's permissions
Requires roles:manage. The permission set is replaced, not merged — the editor sends the full set, and a merge would make removing a permission impossible.
A system role’s permissions can be edited (that is how an organization tailors admin to itself) but its name cannot: the seeding code and the last-owner guard match on owner by name. The owner role must keep roles:manage, or nobody could grant it back.
Autorizações
A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange.
Cabeçalhos
The organization the caller is acting on — the org_… code that appears in the panel URL. It identifies; the membership JOIN is what authorizes, so a forged code reads nothing. Absent, the session's default organization answers.
Parâmetros de caminho
Corpo
The complete set. Duplicates are collapsed; an unknown value is refused.
A fine-grained capability. The catalogue lives in Go; which role holds which lives in the database.
organization:update, organization:delete, members:read, members:write, roles:read, roles:manage, api_keys:read, api_keys:write, customers:read, customers:write Resposta
Updated.