Environment rights : API "update" right is not enough to edit the entrypoint

[exalate-issue-sync]

Describe the bug :

A user is not able to update the API entrypoint with the Environment role API Update permission alone.

To Reproduce :

Steps to reproduce the behaviour:

1. For a user that is the primary owner of an API, set their environment role to have only the API Update permission
2. Try to change the entrypoint of that API
3. Error message saying the user does not have sufficient rights to change the resource

Expected behaviour :

The API Update permission should enable a user to change an API entrypoint.

Current behaviour :

The API Create permission is required in order to update the API entrypoint, but this then enables the user to add a new API.

Desktop :

• Environment: 3.20.21

[exalate-issue-sync]

This issue will be fixed in versions 4.0.13, 3.20.24, 4.2.0, 4.1.4