Read session rights as list or legacy CSV for member endpoints

Shipped: April 20, 2026 at 10:20 PM UTC
Author: Kamo
Commit: 68fd3d3

KSessionService and SecurityRoleController store rights as List<String> of RoleRightType names. MemberSecurityController cast to String and split on comma, causing ClassCastException on membership-type and member-access PATCH. Add sessionHasRight() supporting list (enum name or id token) and legacy CSV.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free Forever View Pricing