Problem/Motivation

Add a new permission (and grant it to Site Admin by default) for the "View JSON" operation link on entities.

Steps to reproduce

Given that a "Site Admin" was logged in to the site
And the Expose a "View JSON" link in entity operations Varbase Settings checkbox was checked
When navigating to "/admin/content"
And clicked on the "Operations" options for a content type, which activated with the direct JSON:API endpoint link
Then the option should only show up for site admins, super admins by default
And not to show up for other user roles.

Proposed resolution

Have access permission check to "View JSON" operation link in content listing.

Remaining tasks

  • ✅ File an issue about this project
  • ✅ Add a new permission and manage them for the Site Admin user role
  • ✅ Testing to ensure no regression
  • ✅ Automated unit/functional testing coverage
    11 Sep 2021 at 16:01 EEST
  • ✅ Developer Documentation support on feature change/addition
  • ➖ User Guide Documentation support on feature change/addition
  • ✅ Code review from 1 Varbase core team member
  • ✅ Full testing and approval
  • ✅ Credit contributors
  • ✅ Review with the product owner
  • ✅ Release varbase-9.0.2, varbase_api-9.0.1

User interface changes

  • The "Site Admin" and "Super Admin" user roles will be able to see the View JSON operation link
  • Other user roles will not able to see the View JSON operation link

API changes

  • None

Data model changes

  • None

Comments

Mohammed J. Razem created an issue. See original summary.

rajab natshah’s picture

Issue tags: +operations
rajab natshah’s picture

Assigned: Unassigned » rajab natshah
rajab natshah’s picture

Version: 8.x-7.x-dev » 9.0.x-dev
rajab natshah’s picture

Issue summary: View changes
rajab natshah’s picture

Issue summary: View changes
StatusFileSize
new23.71 KB
rajab natshah’s picture

Issue summary: View changes
rajab natshah’s picture

Issue summary: View changes

  • RajabNatshah committed 2ed77aa on 9.0.x
    Issue #3160148: Add access permission check to "View JSON" operation...
rajab natshah’s picture

Assigned: rajab natshah » mohammed j. razem
Issue summary: View changes
Status: Active » Needs review
Issue tags: +varbase-9.0.2
rajab natshah’s picture

Issue summary: View changes
rajab natshah’s picture

Assigned: mohammed j. razem » Unassigned
rajab natshah’s picture

Issue summary: View changes
rajab natshah’s picture

Issue summary: View changes
rajab natshah’s picture

Issue summary: View changes

✅ Automated unit/functional testing coverage

11 Sep 2021 at 16:01 EEST
rajab natshah’s picture

Status: Needs review » Fixed
rajab natshah’s picture

Issue summary: View changes
Issue tags: +varbase_api-9.0.1
rajab natshah’s picture

Issue summary: View changes

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

rajab natshah’s picture

Issue summary: View changes
rajab natshah’s picture

Issue summary: View changes