CHW-1801 ClientManageForbidden

you do not have permission to manage this client credential; ask an org admin or the credential owner

Default message: you do not have permission to manage this client credential; ask an org admin or the credential owner
HTTP status: 403 (client)

Problem. PATCH / PUT / DELETE on /api/clients/{id} was rejected even though the caller authenticated. Cause. The caller holds neither clients.manage-all nor ownership of the target credential (clients.manage-own applies only to credentials with created_by_user_id = caller.user_id). Fix. Ask the credential’s creator or an org admin to perform the change, or request the clients.manage-all permission. HTTP 403.