Api Admin Staff Groups Partial Update

PATCH handler with superadmin lock and field protection.

Checks:

  1. Object lock (is_managed=True -> non-superadmins can’t modify)
  2. Field protection (non-superadmins can’t modify specific fields)

Authentication

AuthorizationBearer
JWT access token or Respan API key

Request

This endpoint expects an object.
namestringOptionalformat: "^[A-Za-z0-9_-]+$"1-100 characters
descriptionstringOptional<=500 characters
permissions_overridelist of stringsOptional

Response

idstringRead-only
namestringformat: "^[A-Za-z0-9_-]+$"<=100 characters
granted_byinteger or nullRead-only
granted_atdatetimeRead-only
revoked_atdatetime or nullRead-only
revoked_by_emailstring or nullRead-only
member_countintegerRead-only

Active (non-revoked) members of this group. Tiny — staff roster is bounded, so the COUNT runs without a separate query when the queryset annotates it; otherwise it’s a cheap COUNT.

descriptionstring<=500 characters
permissions_overridelist of strings