Security role save for locked roles and clearer API errors

Ya

20 Aprili 2026, 21:51 UTC

Mwandishi

kamo

Ahadi ya

a48495b

- When isAllowEditSecurity is false, omit rights and securityModelIds from the PUT body so SecurityService accepts metadata-only updates (session timeout, description) instead of rejecting permission payloads. - Treat fully locked roles only when isAllowEditSecurity === false, not when the field is undefined, so legacy rows without the flag can still be edited. - Parse JSON error bodies from failed role updates instead of relying on an often-empty statusText.