Method updateUserPermissions

src/FileRise/Domain/UserModel.php:482–556

* Update permissions (encrypted on disk). Skips admins. */

($permissions)

     * Update permissions (encrypted on disk). Skips admins.
     */
    public static function updateUserPermissions($permissions)
    {
        self::ensureUserCaseMigration();
        global $encryptionKey;
        $permissionsFile = USERS_DIR . "userPermissions.json";
        $existingPermissions = [];

    // Load existing (decrypt if needed)
        if (file_exists($permissionsFile)) {
            $encryptedContent = file_get_contents($permissionsFile);
            $json = decryptData($encryptedContent, $encryptionKey);
            if ($json === false) {
                $json = $encryptedContent; // legacy plaintext
            }
            $existingPermissions = json_decode($json, true) ?: [];
        }

    // Load roles to skip admins
        $usersFile = USERS_DIR . USERS_FILE;
        $userRoles = [];
        if (file_exists($usersFile)) {
            foreach (file($usersFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
                $parts = explode(':', trim($line));
                if (count($parts) >= 3 && preg_match(REGEX_USER, $parts[0])) {
                    $userRoles[strtolower($parts[0])] = trim($parts[2]);
                }
            }
        }

        $knownKeys = [
        'folderOnly','readOnly','disableUpload',
        'bypassOwnership','canShare','canZip','viewOwnOnly'
        ];

    // Build a map of lowercase->actual key to update existing entries case-insensitively
        $lcIndex = [];
        foreach ($existingPermissions as $k => $_) {
            $lcIndex[strtolower($k)] = $k;
        }

        foreach ($permissions as $perm) {
            if (empty($perm['username'])) {
                continue;
            }

            $unameOrig = (string)$perm['username'];             // preserve original case
            $unameLc   = strtolower($unameOrig);
            $role      = $userRoles[$unameLc] ?? null;
            if ($role === "1") {
                continue; // skip admins
            }

            // Find existing key case-insensitively; otherwise use original case as canonical
            $storeKey = $lcIndex[$unameLc] ?? $unameOrig;

            $current = $existingPermissions[$storeKey] ?? [];
            foreach ($knownKeys as $k) {
                if (array_key_exists($k, $perm)) {