@ApiResponse(code = 400, message = "Missing or invalid permission data.")
})
public Response editPermissions(
@ApiParam(name = "username", value = "The name of the user to modify.", required = true) @PathParam("username") String username,
@ApiParam(name = "JSON body", value = "The list of permissions to assign to the user.", required = true) String body) {
PermissionEditRequest permissionRequest;
try {
permissionRequest = objectMapper.readValue(body, PermissionEditRequest.class);
} catch (IOException e) {
throw new BadRequestException(e);
}