Problem/Motivation
In \Drupal\group_action\Plugin\Action\GroupActionBase::access there are permission checks for any and own. But if both return false, the user could still have the admin permission for that permission provider inside the group. This is not about the global admin role outside the group, it is a special admin permission for the current type of relationships.
Proposed resolution
Add the check for the admin permission.
Issue fork group_action-3516855
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #3
jurgenhaasComment #5
mxh commentedMakes sense, thanks for reporting and providing an immediate fix.
Comment #6
jurgenhaasMy pleasure. Would you mind assigning issuecredits as well?
Comment #7
mxh commentedSure. Weird that this doesn't get automatically detected. I now checked you in the credit list, let me know if that's not the right way or how to do it.
Comment #8
jurgenhaasThank you, that's now correct.
Issue credits have to be given manually by the maintainer. There had been automatic ways in the past, but they have been too easy to be gamed, so they have all been turned off.