From f2f42c2c8a840d19c6e1c92d59af57c88fc78065 Mon Sep 17 00:00:00 2001
From: Ryan Petrello <rpetrell@redhat.com>
Date: Mon, 18 Sep 2017 14:15:03 -0400
Subject: [PATCH] don't append to the activity stream on LDAP group
 disassociate

for organizations w/ a large number of ldap orgs/teams, this results in
a _huge_ number of extraneous activity stream entries

see: https://github.com/ansible/ansible-tower/issues/7655
---
 awx/sso/backends.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/awx/sso/backends.py b/awx/sso/backends.py
index 72b12a6b75..5ed0385018 100644
--- a/awx/sso/backends.py
+++ b/awx/sso/backends.py
@@ -307,7 +307,7 @@ def _update_m2m_from_groups(user, ldap_user, rel, opts, remove=True):
                 should_add = True
     if should_add:
         rel.add(user)
-    elif remove:
+    elif remove and user in rel.all():
         rel.remove(user)