Problem/Motivation

User has access to the block library page (/admin/structure/block/library/{theme}) even if he doesn't have access to "Administer block settings for the theme {theme}"

Steps to reproduce

Create a user with permission "administer blocks". Open block library page of the theme, example - /admin/structure/block/library/bartik.

Actual result - page is opened.
Expected result - access denied.

Block lists page '/admin/structure/block/list/{theme}' works as expected.

CommentFileSizeAuthor
#5 block_permissions-library_page_access-3168737-2.patch690 bytessinn
#4 block_permissions-library_page_access-3168737-2.patch690 bytessinn
#2 block_permissions-library_page_access-3168737-2.patch690 bytessinn

Comments

sinn created an issue. See original summary.

sinn’s picture

sinn commented
Status: Active » Needs review
StatusFileSize
new block_permissions-library_page_access-3168737-2.patch690 bytes

Fix is attached.

andras_szilagyi’s picture

andras_szilagyi commented

Look good works well

sinn’s picture

sinn commented
StatusFileSize
new block_permissions-library_page_access-3168737-2.patch690 bytes

Let's try to test it here.

sinn’s picture

sinn commented
StatusFileSize
new block_permissions-library_page_access-3168737-2.patch690 bytes

Run tests

  • sinn committed 1bc268b on 8.x-1.x 
    Issue #3168737 by sinn: Block library page access isn't checked
sinn’s picture

sinn commented
Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.