refac: debt on role backend

api/handlers/update/updateHandler.go

@@ -97,7 +97,7 @@ func decodeRestartKind(w http.ResponseWriter, r *http.Request) (string, bool) {
 }
 
 func canApply(r *http.Request) bool {
-	return access.Grants(r).Holds(role.KeyApplyUpdates)
+	return access.Grants(r).Holds(role.KeySystemApplyUpdates)
 }
 
 func writeDownloadError(w http.ResponseWriter, err error) {