Update a project person

OpenAPI contract

Method

PATCH

Path

/api/v1/projects/{id}/people/{grantId}

Security

jwtBearer (bearer)

Response status

200 400 401 403 404 409 429 500

Request and response schemas

JSON

{
  "requestBody": {
    "application/json": {
      "$ref": "#/components/schemas/UpdateProjectGrantRequest"
    }
  },
  "responses": {
    "200": {
      "description": "Project person updated",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/ProjectGrantResponse"
        }
      }
    },
    "400": {
      "description": "Invalid request",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/RequestError"
        }
      }
    },
    "401": {
      "description": "Authentication required or invalid",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/SecurityError"
        }
      }
    },
    "403": {
      "description": "Authenticated but not permitted",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/SecurityError"
        }
      }
    },
    "404": {
      "description": "Requested project or build was not found",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/ApiError"
        }
      }
    },
    "409": {
      "description": "Request conflicts with current project state",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/ApiError"
        }
      }
    },
    "429": {
      "description": "HTTP rate limit or API-key NCU usage limit exceeded",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/RateLimitError"
        }
      }
    },
    "500": {
      "description": "Unexpected server error",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/ApiError"
        }
      }
    }
  }
}

PATCH /api/v1/projects/{id}/people/{grantId} is JWT-only and requires project-management capability. Send a role: ADMIN, MAINTAINER, BUILDER, VIEWER, or ARTIFACT_CONSUMER. The grant must belong to the project in the route.

The service refuses to demote the last direct ADMIN grant. A missing grant or a grant from another project is reported as not found.

json

{"role":"MAINTAINER"}