Rudder

When updating a user with POST /usermanagement/update/<username>, the request could contain some permission (which is made optional with the parent issue #27211).

But when not updating the user permissions, we never return the current user's permissions in the JSON response but we always return an empty list (because the permissions field is always in the response and we need some value for it). This is not right, we need the users actual permissions in the file