fix: upsert user teams only when newly created user has a team.

- update error msg for empty permissions

cmd/users.go

@@ -205,9 +205,11 @@ func handleCreateUser(r *fastglue.Request) error {
 	}
 
 	// Upsert user teams.
+	if len(user.Teams) > 0 {
 		if err := app.team.UpsertUserTeams(user.ID, user.Teams.Names()); err != nil {
 			return sendErrorEnvelope(r, err)
 		}
+	}
 
 	if user.SendWelcomeEmail {
 		// Generate reset token.

internal/role/role.go

@@ -134,7 +134,7 @@ func (u *Manager) Update(id int, r models.Role) error {
 // validatePermissions returns true if all given permissions are valid
 func (u *Manager) validatePermissions(permissions []string) error {
 	if len(permissions) == 0 {
-		return envelope.NewError(envelope.InputError, "Permissions cannot be empty", nil)
+		return envelope.NewError(envelope.InputError, "Select at least one permission", nil)
 	}
 	for _, perm := range permissions {
 		if !amodels.IsValidPermission(perm) {