Update tests and update org membership docs

Author: csrbarber

tests/test_session.py

@@ -285,7 +285,7 @@ def test_authenticate_success_with_roles(
                     "org_id": session_constants["ORGANIZATION_ID"],
                     "role": "admin",
                     "roles": ["admin", "member"],
-                    "permissions": ["read"],
+                    "permissions": ["read", "write"],
                     "entitlements": ["feature_1"],
                     "exp": int(datetime.now(timezone.utc).timestamp()) + 3600,
                     "iat": int(datetime.now(timezone.utc).timestamp()),
@@ -310,7 +310,7 @@ def test_authenticate_success_with_roles(
             "org_id": session_constants["ORGANIZATION_ID"],
             "role": "admin",
             "roles": ["admin", "member"],
-            "permissions": ["read"],
+            "permissions": ["read", "write"],
             "entitlements": ["feature_1"],
         }
 
@@ -329,7 +329,7 @@ def test_authenticate_success_with_roles(
             assert response.organization_id == session_constants["ORGANIZATION_ID"]
             assert response.role == "admin"
             assert response.roles == ["admin", "member"]
-            assert response.permissions == ["read"]
+            assert response.permissions == ["read", "write"]
             assert response.entitlements == ["feature_1"]
             assert response.user.id == session_constants["USER_ID"]
             assert response.impersonator is None

workos/user_management.py

@@ -285,7 +285,7 @@ def update_organization_membership(
 
         Note:
           role_slug and role_slugs are mutually exclusive. If neither is provided,
-          the user will be assigned the organization's default role.
+          the role(s) of the membership will remain unchanged.
 
         Returns:
             OrganizationMembership: Updated OrganizationMembership response from WorkOS.