Read session rights as List<String> names, not CSV of integer IDs

Shipped

20 April 2026 pukul 00.27 UTC

Author

Kamo

Commit

c7eb0ab

Session rights are stored as a JSON array of RoleRightType name strings. Both **************** and OrganizationController were casting them to String (causing ClassCastException → 500) and comparing by integer ID. Now both check by name matching the established pattern in POSController.