Fix Directory: Removing a user from all groups does not sync the changes correctly

CHANGELOG.md

@@ -21,6 +21,7 @@ If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If
 - Registry: Changing the type of an existing account from `user` to `group` panics.
 - Masked emails: Return `UnknownRecipient` only for disabled or expired masked emails.
 - IDN: `sanitize_email` rejects valid Punycode domains.
+- Directory: Removing a user from all groups does not sync the changes correctly.
 
 ## [0.16.11] - 2026-06-25
 

crates/common/src/cache/directory.rs

@@ -103,12 +103,11 @@ impl Server {
                         .into(),
                     );
                 }
-                if !member_group_ids.is_empty()
-                    && ((updated_account.member_group_ids.len() != member_group_ids.len())
-                        || !updated_account
-                            .member_group_ids
-                            .iter()
-                            .all(|id| member_group_ids.contains(id)))
+                if updated_account.member_group_ids.len() != member_group_ids.len()
+                    || !updated_account
+                        .member_group_ids
+                        .iter()
+                        .all(|id| member_group_ids.contains(id))
                 {
                     updated_account.member_group_ids = member_group_ids.into();
                     has_changes = true;