Right now in panels_ipe.routing.yml a _panels_storage_access requirement: 'read' get's defined. This requirement get's passed by panelizer to entity->access() which doesn't know about read but only the view permission.
Should this be handled by panelizer? I attached a patch for panels for now.

This is critical since only users who bypass panelizer access control can use panelizer IPE right now.

CommentFileSizeAuthor
#2 2791569-Permission-issue-in-panels-ipe-requirement-read.patch2.92 KBmuschpusch
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

muschpusch created an issue. See original summary.

muschpusch’s picture

muschpusch CreditAttribution: muschpusch at Factorial GmbH commented
FileSize
2791569-Permission-issue-in-panels-ipe-requirement-read.patch2.92 KB
DamienMcKenna’s picture

DamienMcKenna
Location NH, USA
CreditAttribution: DamienMcKenna at Mediacurrent commented
Version: 8.x-3.x-dev » 8.x-4.x-dev
Status: Active » Needs review

Status: Needs review » Needs work

The last submitted patch, 2: 2791569-Permission-issue-in-panels-ipe-requirement-read.patch, failed testing. View results