do the same to delete

api/src/Controllers/UsersController.cs

@@ -67,7 +67,7 @@ public class UsersController : ControllerBase {
     }
 
     [Authorize(Policy = Permission.SensitiveData_Modify)]
-    [HttpDelete("{id}/permission")]
+    [HttpDelete("{id}/{permission}")]
     public async Task<ActionResult> removePermission(string id, string permission) {
 
         var userId = User.FindFirstValue(ClaimTypes.NameIdentifier);