Problem

The field access callback looks at the create url aliases and administer url aliases permissions but those are not actually required as the Real-Time SEO module no longer edits the URL alias itself.

Solution

Remove those permissions from the access check.

CommentFileSizeAuthor
#5 yoast_seo-url-alias-permission-2979384-5.patch1.2 KBigoragatti
#4 yoast_seo-url-alias-permission-2979384-2.patch682 bytesigoragatti

Issue fork yoast_seo-2979384

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

Kingdutch created an issue. See original summary.

igoragatti made their first commit to this issue’s fork.

igoragatti opened merge request !17

igoragatti’s picture

igoragatti commented
StatusFileSize
new yoast_seo-url-alias-permission-2979384-2.patch682 bytes

Created a issue fork and removed the permissions. Attached is a patch for the changes.

igoragatti’s picture

igoragatti commented
StatusFileSize
new yoast_seo-url-alias-permission-2979384-5.patch1.2 KB

Added a patch to edit the javascript in the version 8.x-1.x

kingdutch’s picture

kingdutch
he/him
Primary language English
commented
Issue tags: +favorite-of-kingdutch

As someone may currently be relying on users having the edit URL permission in order to control access to the field, I'm hesitant to remove it without a major version bump.

However, we can get there by adding a setting that preserved the behavior for current sites, ensures new behavior for new installations, and provides the necessary deprecation messages.