Problem/Motivation

To create a continuous job you must have the admin tmgmt permission.
Create a continuous job is a big power, and as so need big responsibility.
Otherwise easily a user with permission to create job, could break our site with the auto-accept option.

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

CommentFileSizeAuthor
#4 to_create_a_continuous-2688419-4.patch3.03 KBedurenye

Comments

edurenye created an issue. See original summary.

edurenye’s picture

edurenye commented
Assigned: Unassigned » edurenye
berdir’s picture

berdir
Primary language German
Location Switzerland
commented

Additionally, I think we should consider marking the administer tmgmt permission as restricted so you get the warning about not giving it to non-trusted users.

Reason is that in combination with continuous jobs and auto-accept you could send and "translate" problematic content like content with php filter enabled.

edurenye’s picture

edurenye commented
Status: Active » Needs review
StatusFileSize
new to_create_a_continuous-2688419-4.patch3.03 KB

Done.

  • Berdir committed 1adb12f on 8.x-1.x authored by edurenye 
    Issue #2688419 by edurenye: To create a continuous job you must have...
berdir’s picture

berdir
Primary language German
Location Switzerland
commented
Status: Needs review » Fixed

Thanks, looks good.

Thought about whether we can use entity create access, but the type makes this a bit complicated.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.