This project is not covered by Drupal’s security advisory policy.

Provides a solution for an issue with the Group module that prevents creating new group relationship entities using JSON:API.
#2872645: Creating `Group` content is impossible via REST, JSON:API and GraphQL due to `$context['group']` being required in checking `create` access

Features

Replaces the _entity_create_access requirement on the JSON:API POST route for group_relationship access, with an alternative requirement that makes the group specified in the request body available as context to the create access check, allowing the group module's access logic to work correctly.

Project information

  • caution Minimally maintained
    Maintainers monitor issues, but fast responses are not guaranteed.
  • caution Maintenance fixes only
    Considered feature-complete by its maintainers.
  • Project categories: Access control
  • Created by jonathanshaw on , updated
  • shield alertThis project is not covered by the security advisory policy.
    Use at your own risk! It may have publicly disclosed vulnerabilities.

Releases