Keep old API behavior for now

Do not allow to remove or replace, only add users and roles.
2026-10-24 02:04:04 +08:00 · 2024-06-13 18:05:16 +02:00
parent 1e2348e555
commit a04942fa7a
1 changed files with 3 additions and 2 deletions
@@ -99,8 +99,9 @@ class GroupsManager:
        if payload.role_ids is not None:
            roles = get_roles_by_ids(sa_session, payload.role_ids)

-        if payload.user_ids is not None or payload.role_ids is not None:
-            self._app.security_agent.set_entity_group_associations(groups=[group], roles=roles, users=users)
+        self._app.security_agent.set_entity_group_associations(
+            groups=[group], roles=roles, users=users, delete_existing_assocs=False
+        )

        with transaction(sa_session):
            sa_session.commit()