The add_to_groups parameter is all the groups that a version is currently in. The problem is that the current user may be in some of those groups and not others. Currently, this will return 403 in this case, since there are groups that this version is in, that the user is not in.
But actually, we want the user to be able to add this version to other groups, even though it is in some groups that they (the user) are not in. Similarly, we want the user to be able to remove this version from any group they are in, even if they are not in all the version's groups.
The
add_to_groupsparameter is all the groups that a version is currently in. The problem is that the current user may be in some of those groups and not others. Currently, this will return 403 in this case, since there are groups that this version is in, that the user is not in.But actually, we want the user to be able to add this version to other groups, even though it is in some groups that they (the user) are not in. Similarly, we want the user to be able to remove this version from any group they are in, even if they are not in all the version's groups.