@tags admin-user @accept json @produce json @param X-XSRF-TOKEN header string true "csrf token" @param Authorization header string true "bearer token" @param request body user.UserRoleUpdateRequest true "update user role" @success 200 {object} response.Response{data=user.UserData} @failure 400 {object} response.ErrorResponse "code: 400-001(Bad Request), 400-002(request validation failed), 400-005(permission is repeat)" @failure 401 {object} response.ErrorResponse "code: 401-001(Unauthorized)" @failure 403 {object} response.ErrorResponse "code: 403-001(Forbidden)" @failure 500 {object} response.ErrorResponse "code: 500-001(Internal Server Error)" @router /api/admin/user-role [put].