function user_post_update_update_roles

Calculate role dependencies and remove non-existent permissions.

File

core/modules/user/user.post_update.php, line 24

Code

function user_post_update_update_roles(&$sandbox = NULL) {
    $cleaned_roles = [];
    $existing_permissions = array_keys(\Drupal::service('user.permissions')->getPermissions());
    \Drupal::classResolver(ConfigEntityUpdater::class)->update($sandbox, 'user_role', function (Role $role) use ($existing_permissions, &$cleaned_roles) {
        $removed_permissions = array_diff($role->getPermissions(), $existing_permissions);
        if (!empty($removed_permissions)) {
            $cleaned_roles[] = $role->label();
            \Drupal::logger('update')->notice('The role %role has had the following non-existent permission(s) removed: %permissions.', [
                '%role' => $role->label(),
                '%permissions' => implode(', ', $removed_permissions),
            ]);
        }
        $permissions = array_intersect($role->getPermissions(), $existing_permissions);
        $role->set('permissions', $permissions);
        return TRUE;
    });
    if (!empty($cleaned_roles)) {
        return new PluralTranslatableMarkup(count($cleaned_roles), 'The role %role_list has had non-existent permissions removed. Check the logs for details.', 'The roles %role_list have had non-existent permissions removed. Check the logs for details.', [
            '%role_list' => implode(', ', $cleaned_roles),
        ]);
    }
}