I am implementing webforms that automatically send the [webform_submission:token-update-url] (through the customized email handler) to the account A from the supvervisor role to approve/reject when they are submitted. I see that everything is working fine except when A clicks the link to update the submission, the account is automatically removed from the supvervisor role which leads the radios element to approve/reject unaccessible, even after I assigned A to the supervisor role initially. Ann I had to reassign every time the account clicks the link. Is there a way for my Drupal 9 site to stop doing this? I appreciate your help.
P.S. When I checked my log messages, I see path: /user/50. drupalcorehttpexceptioncacheableaccessdeniedhttpexception: the ‘access user profiles’ permission is required and the user must be active. in drupalcoreroutingaccessawarerouter->checkaccess() (line 118 of /var/www/html/drupal9_dev/core/lib/drupal/core/routing/accessawarerouter.php).
But why though? I already assigned the role to the account.
How the whole thing working now is: requestor submits a form in chrome-> approver opens the link in edge and logs in -> the account is automatically removed from the role and the administrator has to assign the role again.