Title sums it up.

I have a "contributor" role who should only be able to add a few node types, yet they can somehow see the Feeds overview page at /admin/content/feed.

This menu router seems to use the "access administration pages" which is described as "Use the administration pages and help." This just seems to be a different intention for access. Granted, the user can't do anything on this page, it's just odd that they can access it and the appearance of the option to perform operations. The "access feed overview" permission doesn't actually seem to be used anywhere.

Comments

bburg created an issue. See original summary.

MegaChriz’s picture

I thought this was fixed in #2836998: Anonymous can access feeds listing?

How long ago did you install Feeds?

bburg’s picture

Status: Active » Closed (duplicate)

That probably addresses the issue, I had reviewed old issues and commits, but didn't find that one for some reason. I'll need to update my Feeds version.

MegaChriz’s picture

Note that you need to manually import the config file 'views.view.feeds_feed.yml' as database updates aren't supported yet.