Group membership is granted and revoked based on mappings. This conflicts with manual assignment.
Use the user.data service to store the mappings. This will allow every profile to revoke group:roles previously granted correctly.
$user = \Drupal::currentUser();
// Define an array of role => profile.
$roles= [
'group:1' => [
'team--administrator' => 'profile_a',
],
'group:3' => [
'team--teacher' => 'profile_b',
],
'group:5' => [
'team--staff' => 'profile_b',
],
];
// Store the array as user data.
\Drupal::service('user.data')->set('authorization_group', $user->id(), 'roles', $roles);
Active
1.0
Code
I want to give an update. I am working on ✨ Drupal Roles Consumer - store mappings in user.data Active and then plan to work on this.
I am still working on the revokeGrants functionality. I want to be able to revoke grants across multiple profiles. I also want to respect the existing delete memebership.