Peter found this today - it silently accepts and throws away bad JSON.
1. You're allowed to enter new permissions with the "Options" field blank. 2. Trying to do an update with invalid input to the "Options" field does not complain with an error.
This is probably something on the backend...
I can have a look at it. Could you please assign this bug to me ?
Ashish looked into this and couldn't find any cases where it happened anymore. I dug through blame and it looks like it was fixed by https://github.com/mozilla/balrog/commit/e1940615ffda8b539d7e4ea787dae82ec2027498.