API Bug: POST /api/users/{id} drops xf_user_group_change groups

[bottiger]

Setting secondary_group_ids via the REST API does not merge groups from xf_user_group_change into the rebuilt cache. Groups added by internal systems (moderator promotions, user upgrades, automatic promotions) are silently removed from xf_user_group_relation and the cached secondary_group_ids column, even though the xf_user_group_change records remain intact.

Steps to reproduce

1. Have a user who is a moderator (entry in xf_moderator, EXAMPLE: group 4 added via xf_user_group_change)
2...

Read more

Continue reading...