Fixed empty permission list replace issue in v2 Role patch

[PasinduYeshan]

Currently, when attempting to replace the permissions of a role with an empty list using the provided API endpoint, the existing permissions remain unchanged. This behavior is demonstrated in the following CURL request, where the aim is to clear all permissions associated with a specified role:

curl --location --request PATCH 'https://localhost:9443/scim2/v2/Roles/c3445ed2-a6a9-466b-9796-1094b160770a' \
--header 'Content-Type: application/scim+json' \
--header 'Accept: application/scim+json' \
--header 'Authorization: Basic YWRtaW46YWRtaW4=' \
--header 'Cookie: atbv=7701cee0-00fb-4a32-8d5a-ae677f76808c' \
--data '{
    "Operations": [
        {
            "op": "replace",
            "value": {
                "permissions": [
                    
                ]
            }
        }
    ],
    "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:PatchOp"
    ]
}'

With this fix, the system will now correctly replace the existing permissions in the role, even when the replacement list is empty.

Related Issue

• [Feature] Support application roles for Identity Server and support RBAC for apps wso2/product-is#16363

[dewniMW]

@PasinduYeshan can you add the git issue?