From 8f831b2be35998d849a0d1ee9c7224174158a771 Mon Sep 17 00:00:00 2001
From: gepd <guillermoepd@hotmail.com>
Date: Mon, 6 Jun 2022 18:27:05 -0400
Subject: [PATCH] Allows to update permissions without payload

---
 app/controllers/api/database.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/controllers/api/database.php b/app/controllers/api/database.php
index 0ed47d4b5f..228420f353 100644
--- a/app/controllers/api/database.php
+++ b/app/controllers/api/database.php
@@ -1992,8 +1992,8 @@ App::patch('/v1/database/collections/:collectionId/documents/:documentId')
 
         $data = (\is_string($data)) ? \json_decode($data, true) : $data; // Cast to JSON array
 
-        if (empty($data)) {
-            throw new Exception('Missing payload', 400);
+        if (empty($data) && empty($read) && empty($write)) {
+            throw new Exception('Missing payload or read/write permissions', 400);
         }
  
         if (!\is_array($data)) {