Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
Problem/Motivation
The permissions set for the route "entity.entity_queue.subqueue_list" at entityqueue.routing.yml file are not consistent with the rest of routes. This route is using the permission
_permission: 'administer site configuration'
instead of
_permission: 'administer entityqueue+manipulate entityqueues+manipulate all entityqueues'
Like we have in other related routes like : entity.entity_queue.delete_form
Proposed resolution
Change
entity.entity_queue.subqueue_list:
path: '/admin/structure/entityqueue/{entity_queue}/list'
defaults:
_controller: '\Drupal\entityqueue\Controller\EntityQueueUIController::subqueueList'
_title: 'Subqueues'
requirements:
_permission: 'administer site configuration'
to
entity.entity_queue.subqueue_list:
path: '/admin/structure/entityqueue/{entity_queue}/list'
defaults:
_controller: '\Drupal\entityqueue\Controller\EntityQueueUIController::subqueueList'
_title: 'Subqueues'
requirements:
_permission: 'administer entityqueue+manipulate entityqueues+manipulate all entityqueues'
Comment | File | Size | Author |
---|---|---|---|
#3 | wrong_permissions-2762821-3.patch | 576 bytes | Ramdas Gaikar |
Comments
Comment #2
Ramdas Gaikar CreditAttribution: Ramdas Gaikar at Intelliswift commentedComment #3
Ramdas Gaikar CreditAttribution: Ramdas Gaikar at Intelliswift commentedHi jlbellido,
I have attached patch with suggested solution.
Thanks
Comment #4
jlbellidoHi @ramdas, the patch looks fine for me.
Thanks to @luxairgroup for letting me work on this issue and report it.
Comment #6
amateescu CreditAttribution: amateescu for Pfizer, Inc. commentedCommitted and pushed to 8.x-1.x. Thanks!