Same permission of a Directus collection and role can be made which prevent from updating that permission
ImprovementPermissionsEngine
# Same permission of a Directus collection and role can be made which prevent from updating that permission
Create Permissions API doesn't prevent non-unique Role-Collection-Action items
BugImprovementPermissionsEngine