From 742f50cb5a6ee6e5c089c616d2c4b65f4a5ecb9b Mon Sep 17 00:00:00 2001
From: Frederick Muriuki Muriithi
Date: Thu, 31 Jul 2025 16:18:41 -0500
Subject: Re-grant access to sysadmin, in case they're removed as group member

---
 gn_auth/auth/authorisation/resources/groups/models.py | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'gn_auth/auth/authorisation/resources/groups/models.py')

diff --git a/gn_auth/auth/authorisation/resources/groups/models.py b/gn_auth/auth/authorisation/resources/groups/models.py
index e027b2c..597ac37 100644
--- a/gn_auth/auth/authorisation/resources/groups/models.py
+++ b/gn_auth/auth/authorisation/resources/groups/models.py
@@ -366,6 +366,9 @@ def remove_user_from_group(
                                  user,
                                  grp_resource.resource_id,
                                  "group-creator")
+        grant_access_to_sysadmins(cursor,
+                                  grp_resource.resource_id,
+                                  system_resource(conn).resource_id)
 
 
 @authorised_p(
-- 
cgit 1.4.1