Robots are unable to rotate secrets of other robots

[0xC4DE]

Expected behavior and actual behavior:
According to https://github.com/goharbor/harbor/blob/main/src/server/v2.0/handler/robot.go#L263

A user/robot needs the "rbac.ActionUpdate" permission in order to update the security of a robot. (error seems to originate from this section of code:

harbor/src/server/v2.0/handler/base.go

Lines 135 to 138 in 8b82233

	resource := system.NewNamespace().Resource(subresource...)
	if !secCtx.Can(ctx, action, resource) {
	return errors.ForbiddenError(nil).WithMessage(secCtx.GetUsername())
	}

)

However, robots cannot be granted that robots.ActionUpdate permission per this menu inside of the edit robots permission.

Steps to reproduce the problem:
Create two system-level robots, one with every system permission, the other with none
Query the API with PATCH https://{harbor}/api/v2.0/robots/{robot_id}/ log-in should be bot with all permissions
Recieve a FORBIDDEN with "message": "{logged-in account name}"

• harbor version: v2.14.4

[wy65701436]

This is a by-designed behavior, please refer to the non-goal of the robot proposal. https://github.com/goharbor/community/blob/main/proposals/new/Robot-Account-Expand.md#non-goal

[0xC4DE]

It is my understanding that robots can create/destroy other robots, is that not more permissive than rotating the key? Perhaps that's the bug then?

Could this behavior also be documented in the API in some way? Or did I miss that. Thanks.