As you know we have a group based sync script in place. In some cases users are in multiple groups for read and write.
Therefore I iterate over groups in correct order read->write->admin and simply PATCH access
Bug: When patching a read user to write manager I get 403 Forbidden (but change is correctly done)
Reproduce:
- add a user with read user access
- patch via API /api/v1/projects/{project_slug}/users/{user_id} to manager write
The other way around works without error
- add a user with manager write access
- patch via API /api/v1/projects/{project_slug}/users/{user_id} to user read