Problem/Motivation

The permissions set for the route "entity.entity_queue.subqueue_list" at entityqueue.routing.yml file are not consistent with the rest of routes. This route is using the permission
_permission: 'administer site configuration'
instead of
_permission: 'administer entityqueue+manipulate entityqueues+manipulate all entityqueues'

Like we have in other related routes like : entity.entity_queue.delete_form

Proposed resolution

Change

entity.entity_queue.subqueue_list:
  path: '/admin/structure/entityqueue/{entity_queue}/list'
  defaults:
    _controller: '\Drupal\entityqueue\Controller\EntityQueueUIController::subqueueList'
    _title: 'Subqueues'
  requirements:
    _permission: 'administer site configuration'

to

entity.entity_queue.subqueue_list:
  path: '/admin/structure/entityqueue/{entity_queue}/list'
  defaults:
    _controller: '\Drupal\entityqueue\Controller\EntityQueueUIController::subqueueList'
    _title: 'Subqueues'
  requirements:
    _permission: 'administer entityqueue+manipulate entityqueues+manipulate all entityqueues'
CommentFileSizeAuthor
#3 wrong_permissions-2762821-3.patch576 bytesRamdas Gaikar
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

jlbellido created an issue. See original summary.

Ramdas Gaikar’s picture

Assigned: Unassigned » Ramdas Gaikar
Ramdas Gaikar’s picture

Status: Active » Needs review
FileSize
576 bytes

Hi jlbellido,

I have attached patch with suggested solution.

Thanks

jlbellido’s picture

Status: Needs review » Reviewed & tested by the community

Hi @ramdas, the patch looks fine for me.

Thanks to @luxairgroup for letting me work on this issue and report it.

amateescu’s picture

Status: Reviewed & tested by the community » Fixed

Committed and pushed to 8.x-1.x. Thanks!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.