Problem/Motivation

Currently there is only 3 permissions in this module - adminster, create, and edit. To delete, view revisions, revert revisions, or delete revisions you must have the adminster permission. This also allows access to field_ui, etc.

The paragraphs_library view's access is also set to the administer permission, and the browser view has no access restrictions at all (this should probably be fixed in a separate issue.

Proposed resolution

Add the following permissions:

  1. delete paragraph library item
  2. view paragraph library item revision history
  3. view paragraph library item revision
  4. revert paragraph library item revision
  5. delete paragraph library item revision

And update the route access to allow access either either these permissions OR the adminster one.

CommentFileSizeAuthor
#4 paragraphs-3340086-expand-permissions-for-paragraphs-library-mr48.patch9.35 KBdgsiegel

Issue fork paragraphs-3340086

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

acbramley created an issue. See original summary.

acbramley’s picture

acbramley CreditAttribution: acbramley at PreviousNext for Service NSW commented
Status: Active » Needs review

Test only commit up (with the permissions)

acbramley opened merge request !48

dgsiegel’s picture

dgsiegel CreditAttribution: dgsiegel commented
FileSize
paragraphs-3340086-expand-permissions-for-paragraphs-library-mr48.patch9.35 KB

As we needed this patch for our composer setup and couldn't trust Gitlab to always deliver the same file, I've reuploaded @acbramley's patch. All credit belongs to him.