Problem/Motivation

Currently to see the storage collection page it is necessary to assign the administer storage entities permission, but this implies too high permissions for non-administrative roles.

Proposed resolution

  • Provide a new access storage overview permission
  • Provide an update path to assign access storage overview permission to roles with administer storage entities permission
  • Update permission required for `storage` view if it exists
  • Update permission required on `storage` view inside config/optional
CommentFileSizeAuthor
#2 storage-add_access_storage_overview_permission-3328816-2.patch2.18 KBrobertom

Comments

robertom created an issue. See original summary.

robertom’s picture

robertom commented
Status: Active » Needs review
StatusFileSize
new storage-add_access_storage_overview_permission-3328816-2.patch2.18 KB

Attached a proposed patch.

P.S. this patch is largely inspired by this issue #3255189: Add "access microcontent overview" permission, overhaul "administer microcontent". Thanks @mstrelan

mxh’s picture

mxh commented
Status: Needs review » Needs work

Please use regular update hooks instead of post_update functions.

Alternative: Instead of adding the new permissions to users who are allowed to administer storage entities, just additionally allow to access the overview page if the user has either the administer or access overview permission. AFAIK it's possible to define multiple permissions for accessing.

  • a6738db9 committed on 1.1.x 
    Issue #3328816 by robertom: Add "access storage overview" permission
mxh’s picture

mxh commented

I reviewed this one again and changed my mind about #3. Committed into 1.1.x and will be part of the next 1.2.x release. Thanks!

mxh’s picture

mxh commented
Status: Needs work » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.