unapply `force_sensitive` during domain policy resets

1 files changed, 3 insertions, 0 deletions

diff --git a/app/services/unblock_domain_service.rb b/app/services/unblock_domain_service.rb
index ab246203f..ec6723421 100644
--- a/app/services/unblock_domain_service.rb
+++ b/app/services/unblock_domain_service.rb
@@ -11,6 +11,9 @@ class UnblockDomainService < BaseService
 
   def process_retroactive_updates
     blocked_accounts.in_batches.update_all(update_options) unless domain_block.noop?
+    if @domain_block.force_sensitive?
+      blocked_accounts.where(force_sensitive: true).in_batches.update_all(force_sensitive: false)
+    end
   end
 
   def blocked_accounts