Enable Role Modification for Sub-Org Admins in AppPortalRoleManagementListener

[HasiniSama]

Purpose

Enable role modification for sub-org admins in the AppPortalRoleManagementListener.

Changes

• Added isRoleModificationAllowedForTenant method to check if role modification is allowed for the admin by verifying if the tenant is an organization.
• Updated preUpdateUserListOfRole method to use this check and handle exceptions appropriately.

Testing

• Verified that role modifications are allowed for sub-org admins.
• Ensured that exceptions were handled correctly and informative error messages were provided.

Related Issues

• Cannot remove the admin user from parent org in the sub org level to revoke access product-is#19904

Checklist

• e2e cypress tests locally verified.
• Manual test round performed and verified.
• UX/UI review done on the final implementation.
• Documentation provided.
• Unit tests provided.
• Integration tests provided.

Security checks

• Followed secure coding standards in http://wso2.com/technical-reports/wso2-secure-engineering-guidelines?
• Ran FindSecurityBugs plugin and verified report.
• Confirmed that this PR doesn't commit any keys, passwords, tokens, usernames, or other secrets?

[CLAassistant]

All committers have signed the CLA.

[wso2-jenkins-bot]

🦋 Changeset detected

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.