Problem/Motivation
The permissions set for the route "entity.entity_queue.subqueue_list" at entityqueue.routing.yml file are not consistent with the rest of routes. This route is using the permission
_permission: 'administer site configuration'
instead of
_permission: 'administer entityqueue+manipulate entityqueues+manipulate all entityqueues'
Like we have in other related routes like : entity.entity_queue.delete_form
Proposed resolution
Change
entity.entity_queue.subqueue_list:
path: '/admin/structure/entityqueue/{entity_queue}/list'
defaults:
_controller: '\Drupal\entityqueue\Controller\EntityQueueUIController::subqueueList'
_title: 'Subqueues'
requirements:
_permission: 'administer site configuration'to
entity.entity_queue.subqueue_list:
path: '/admin/structure/entityqueue/{entity_queue}/list'
defaults:
_controller: '\Drupal\entityqueue\Controller\EntityQueueUIController::subqueueList'
_title: 'Subqueues'
requirements:
_permission: 'administer entityqueue+manipulate entityqueues+manipulate all entityqueues'| Comment | File | Size | Author |
|---|---|---|---|
| #3 | wrong_permissions-2762821-3.patch | 576 bytes | ramdas gaikar |
Comments
Comment #2
ramdas gaikar commentedComment #3
ramdas gaikar commentedHi jlbellido,
I have attached patch with suggested solution.
Thanks
Comment #4
jlbellidoHi @ramdas, the patch looks fine for me.
Thanks to @luxairgroup for letting me work on this issue and report it.
Comment #6
amateescu commentedCommitted and pushed to 8.x-1.x. Thanks!