SCIM: Confusion of member types in GET /Roles endpoints

[fflorent]

Describe the current behavior

When querying the GET /api/scim/v2/Roles endpoint, we see members of the Roles.

When a role is inherited (for example the roles of a doc inside a workspace), we expect the members of the Role of the document to include Roles of the workspace.

But we see Groups. For example:

    {
      "schemas": [
        "urn:ietf:params:scim:schemas:Grist:1.0:Role"
      ],
      "id": "2300",
      "meta": {
        "resourceType": "Role",
        "location": "/api/scim/v2/Roles/2300"
      },
      "displayName": "viewers",
      "members": [
        {
          "value": "336",
          "display": "viewers",
          "$ref": "/api/scim/v2/Groups/336",
          "type": "Group"
        }
      ],
    }

Steps to reproduce

Describe the expected behavior

We should see this list of members instead:

      [
        {
          "value": "336",
          "display": "viewers",
          "$ref": "/api/scim/v2/Roles/336",
          "type": "Role"
        }
      ]

Where have you encountered this bug?

• On docs.getgrist.com
• On a self-hosted instance

Instance information (when self-hosting only)

No response