Read session rights as list or legacy CSV for member endpoints

Shipped

20 ஏப்ரல், 2026 அன்று 10:20 PM UTC

Author

Kamo

Commit

68fd3d3

KSessionService and SecurityRoleController store rights as List<String> of RoleRightType names. MemberSecurityController cast to String and split on comma, causing ClassCastException on membership-type and member-access PATCH. Add sessionHasRight() supporting list (enum name or id token) and legacy CSV.