The code introduced by NXP-27947 does not take into account the case of the system user, which is represented by a SystemPrincipal object, and not a NuxeoPrincipal object for the other users.
The consequence is that the JSON representation for this object is incomplete and it produces JavaScript errors in the Permissions tab