uc_product.routing.yml contains commented out references to ProductFeaturesController::checkAccess(), which doesn't work at present. Let's fix that.

I believe that if we require both the "administer product features" permission, and the user also needs permission to edit the node (via _entity_access: 'node.update'), we can remove the "administer own product features" permission.

CommentFileSizeAuthor
product-feature-permissions.patch3.08 KBlongwave
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

longwave created an issue. See original summary.

longwave’s picture

longwave
he/him
Primary language English
Location UK
CreditAttribution: longwave commented
Status: Needs review » Fixed

  • longwave committed 7dd78a8 on 8.x-4.x 
    Issue #2667296 by longwave: Finish product feature permissions

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.