Issue #3473842: Governance setting roles should be inclusive

config/install/knowledge.governance.settings.yml

-roles:
-  exclude:
-    anonymous: anonymous
-    authenticated: authenticated
+roles: { }

config/schema/knowledge.schema.yml

@@ -99,9 +99,6 @@ knowledge.governance.settings:
   label: 'governance settings'
   mapping:
     roles:
-      type: mapping
-      mapping:
-        exclude:
       type: sequence
       sequence:
         type: string

src/Form/GovernanceForm.php

@@ -69,10 +69,10 @@ final class GovernanceForm extends ConfigFormBase {
     foreach ($roles as $machine_name => $role) {
       $options[$machine_name] = $role->label();
     }
-    $form['exclude'] = [
-      '#type' => 'select',
-      '#title' => $this->t('Exclude'),
-      '#default_value' => $settings->get('roles.exclude'),
+    $form['roles'] = [
+      '#type' => 'checkboxes',
+      '#title' => $this->t('When the user has one of these roles'),
+      '#default_value' => $settings->get('roles') ?? [],
       '#options' => $options,
       '#multiple' => TRUE,
     ];
@@ -86,7 +86,7 @@ final class GovernanceForm extends ConfigFormBase {
   public function submitForm(array &$form, FormStateInterface $form_state): void {
 
     $this->config('knowledge.governance.settings')
-      ->set('roles.exclude', $form_state->getValue('exclude'))
+      ->set('roles', $form_state->getValue('roles'))
       ->save();
     parent::submitForm($form, $form_state);
   }