Role permissions are removed from a role when execute SCIM2 Patch ADD operation

[ShanChathusanda93]

Describe the issue:
We can add permissions to an existing role from the SCIM2 Patch operation. When we use the add operation to add permissions to an existing role, then the existing permissions are getting deleted and only the permissions that we are adding from the PATCH ADD operation will be available in the role.

Screen.Recording.2024-11-06.at.11.30.47.PM.mov

Also if we execute the aforementioned PATCH ADD operation again to the same resource, then in the second time again the previously added permissions are removed.

Screen.Recording.2024-11-06.at.11.34.20.PM.mov

How to reproduce:

1. Log in to Console application and create a role. (Can directly do it from SCIM2 Roles API as well)
2. Now assign some permissions to the role.
3. Execute PATCH ADD operation on to of the created role.

curl --location --request PATCH 'https://localhost:9444/scim2/v2/Roles/e476b203-f20b-4a0c-b484-c63856300d04' \
--header 'Authorization: Bearer 8052da4b-dce4-396d-a47e-275933aabe0e' \
--header 'Content-Type: application/json' \
--data '{
    "Operations": [
        {
            "op": "add",
            "value": {
                "permissions": [
                    {
                        "value": "{{SCOPE_NEEDS_TO_BE_ADDED"
                    }
                ]
            }
        }
    ],
    "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:PatchOp"
    ]
}'

4. In the response you can see that only the Scopes you added from the API PATCH ADD operation. Previously assigned ones are not available.
5. This can be seen in the console as well.
6. Now again execute the SCIM2 PATCH ADD operations with the same content.
7. Now in the response the permissions are nemoved.

Expected behavior:

• ADD operation only should add the details to a resurce.

Environment information (Please complete the following information; remove any unnecessary fields) :

• Product Version: IS 7.1.0 m4 SNAPSHOT
• OS: Mac
• Database: H2
• Userstore: JDBC