Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
uc_product.routing.yml contains commented out references to ProductFeaturesController::checkAccess(), which doesn't work at present. Let's fix that.
I believe that if we require both the "administer product features" permission, and the user also needs permission to edit the node (via _entity_access: 'node.update'), we can remove the "administer own product features" permission.
Comment | File | Size | Author |
---|---|---|---|
product-feature-permissions.patch | 3.08 KB | longwave | |
|
Comments
Comment #2
longwave