function user_update_10000

Remove non-existent permissions created by migrations.

File

core/modules/user/user.install, line 150

Code

function user_update_10000() {
  $cleaned_roles = [];
  $existing_permissions = array_keys(\Drupal::service('user.permissions')->getPermissions());
  $config_factory = \Drupal::configFactory();
  $role_ids = $config_factory->listAll('user.role.');
  foreach ($role_ids as $role_id) {
    $role_config = $config_factory->getEditable($role_id);
    $removed_permissions = array_diff($role_config->get('permissions'), $existing_permissions);
    if (!empty($removed_permissions)) {
      $cleaned_roles[] = $role_config->get('label');
      \Drupal::logger('update')->notice('The role %role has had the following non-existent permission(s) removed: %permissions.', [
        '%role' => $role_config->get('label'),
        '%permissions' => implode(', ', $removed_permissions),
      ]);
      $permissions = array_intersect($role_config->get('permissions'), $existing_permissions);
      $role_config->set('permissions', $permissions);
      $role_config->save();
    }
  }
  if (!empty($cleaned_roles)) {
    return new PluralTranslatableMarkup(count($cleaned_roles), 'The role %role_list has had non-existent permissions removed. Check the logs for details.', 'The roles %role_list have had non-existent permissions removed. Check the logs for details.', [
      '%role_list' => implode(', ', $cleaned_roles),
    ]);
  }
}