Issue Summary

When creating or updating a Page Access Group using the POST, PATCH, or PUT method, you need to include the Page Access User IDs you want to add to the group. The API allows you to add the same Page Access User ID multiple times, which duplicates the user in the group.

If you try to delete any duplicates, all the instances of the users are deleted due to them having the same ID.

Steps to Reproduce

1. Use the API to update a page access group.
2. In the body, use the same user ID multiple times:

{
    "page_access_group": {
        
        "page_access_user_ids": [
            "l6441jlv5tz3",
            "l6441jlv5tz3",
            "l6441jlv5tz3"
        ]
    }
} 

1. If you check the group, the user appears three times. If you check the user, the group appears three times.

Expected Results

If you add a Page Access User ID more than once, the API should fail to process the request or only process the ID once. Duplicates shouldn't be allowed. The UI does not allow you to add multiple instances of a user.

Actual Results

The user is duplicated with the same ID as a page access user for that group.

Workaround

The workaround is to not use the API and duplicate IDs. You can also use the UI to prevent the issue from happening altogether.