From 4fa6d81f5e4c6ca4357ca5909c905e204270f5ad Mon Sep 17 00:00:00 2001
From: Vincent Gao <vincent.gao@dpc.vic.gov.au>
Date: Tue, 17 Oct 2023 16:29:11 +1100
Subject: [PATCH] [SDPAP-6864]Approvers should not be able to publish Alerts

---
 config/install/user.role.approver.yml | 1 -
 tide_core.install                     | 9 +++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/config/install/user.role.approver.yml b/config/install/user.role.approver.yml
index bb23af26f..34a33c0a0 100644
--- a/config/install/user.role.approver.yml
+++ b/config/install/user.role.approver.yml
@@ -30,7 +30,6 @@ permissions:
   - 'administer webform element access'
   - 'administer webform submission'
   - 'break content lock'
-  - 'create alert content'
   - 'create image_gallery content'
   - 'create landing_page content'
   - 'create media'
diff --git a/tide_core.install b/tide_core.install
index ba3d07090..cd032c16d 100644
--- a/tide_core.install
+++ b/tide_core.install
@@ -2014,3 +2014,12 @@ function tide_core_update_8098() {
   $approver->grantPermission('tide node bulk update');
   $approver->save();
 }
+
+/**
+ * Revoke the permission of creating alerts from the approver role.
+ */
+function tide_core_update_8099() {
+  $approver = Role::load('approver');
+  $approver->revokePermission('create alert content');
+  $approver->save();
+}