fix(http api): throw validation error if missing property in call to /api/admin/users/123/permissions, #7365