'Assign Roles' UI Action on Sys_user table is removing existing roles inherited via Groups. - Known Error

'Assign Roles' UI Action on Sys_user table is removing existing roles inherited via Groups. Description 'Assign Roles' UI Action on sys_user table is removing roles inherited from Groups

Steps to Reproduce

1.Login to a NewYork/Orlando instance. 2.Impersonate any user with sn_hr_core.admin, security_admin and admin role. 3.Open any sys_user record. 4.Assign the user at least one group with HR roles (e.g. HR Tier 1) 5.Click the Assign Roles UI Action from the Related Links. 6.Select any HR role that does not contain other roles, for example sn_hr_core.content_reader, and click OK. 7.You will notice, it removes all existing roles added by group and only keeps sn_hr_core.content_reader.

Workaround In Script Include HRSecurityUtilsAJAX, there is logic to remove user roles that we did not choose in the role picker. The query for roles to be deleted should not include roles inherited from groups.

Around line 110, within function "removeUserRoles", this line should be added: "gr.addQuery('inherited', false);". This will prevent deletion of roles inherited from groups.