Config exporting deletes user anonymous and user authenticated if a dependency on a config_exclude_modules exists

Created on 13 October 2023, 11 months ago

Problem/Motivation

If a permission for a module listed in config_exclude_modules is set for anonymous and/or authenticated roles, the roles anonymous and authenticated roles are deleted.

Steps to reproduce

  1. Add devel to config_exclude_modules
  2. Grant permission 'Allow access to developer information' from devel to anonymous and authenticated roles
  3. Config export and the following occurs:
drush config-export
 [notice] Differences of the active config to the export directory:
+------------+-------------------------+-----------+
| Collection | Config                  | Operation |
+------------+-------------------------+-----------+
|            | user.role.authenticated | Delete    |
|            | user.role.anonymous     | Delete    |
+------------+-------------------------+-----------+

Proposed resolution

Use ::onDependencyRemoval() to remove permissions that are dependant on an excluded module perhaps?

Remaining tasks

Decide how to solve

User interface changes

None

API changes

none

Data model changes

None

Release notes snippet

N/A

πŸ› Bug report
Status

Active

Version

10.0 ✨

Component
User moduleΒ  β†’

Last updated 1 day ago

Created by

πŸ‡¬πŸ‡§United Kingdom scott_euser

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024