This project is not covered by Drupal’s security advisory policy.
Provides a solution for an issue with the Group module that prevents creating new group relationship entities using JSON:API.
#2872645: Creating `Group` content is impossible via REST, JSON:API and GraphQL due to `$context['group']` being required in checking `create` access
Features
Replaces the _entity_create_access requirement on the JSON:API POST route for group_relationship access, with an alternative requirement that makes the group specified in the request body available as context to the create access check, allowing the group module's access logic to work correctly.
Project information
Minimally maintained
Maintainers monitor issues, but fast responses are not guaranteed.Maintenance fixes only
Considered feature-complete by its maintainers.- Project categories: Access control
- Created by jonathanshaw on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
Releases
Development version: 1.0.x-dev updated 31 Dec 2025 at 19:20 UTC
