Read session rights as List<String> names, not CSV of integer IDs

Shipped

April 20, 2026 at 12:27 AM UTC

Author

Kamo

Commit

c7eb0ab

Session rights are stored as a JSON array of RoleRightType name strings. Both **************** and OrganizationController were casting them to String (causing ClassCastException → 500) and comparing by integer ID. Now both check by name matching the established pattern in POSController.