Set default roles as list

This prevents '"Manager" in roles' breaking if roles was missing
plone · Nov 1, 2023 · 36b8a90 · 36b8a90
1 parent a94d9f6
commit 36b8a90
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/plone/restapi/services/groups/add.py b/src/plone/restapi/services/groups/add.py
@@ -28,7 +28,7 @@ def reply(self):
         if not groupname:
             raise BadRequest("Property 'groupname' is required")
 
-        roles = data.get("roles", None)
+        roles = data.get("roles", [])
 
         if not self.is_zope_manager and "Manager" in roles:
             raise BadRequest(