Problem/Motivation

There are still three routes with requirements
_permission: 'administer taxonomy' 'administer taxonomy'
instead of
_entity_create_access: 'taxonomy_term:{taxonomy_vocabulary}'
This was addressed in [#2991079] with a patch for 8.x.1.x.
#17 in this issue also has a patch for 2.x but it does not apply any more.

Most of the changes from this issue made it into 2.x - but not all.

Proposed resolution

Change requirements of the three routes to
_entity_create_access: 'taxonomy_term:{taxonomy_vocabulary}'

Comments

gngn created an issue. See original summary.

gngn’s picture

Status: Active » Needs review
StatusFileSize
new1.36 KB

Patch as proposed above.

vladimiraus’s picture

Testing

gngn’s picture

@VladimirAus did you tests had any results?
(not pushing, just curious)

dcam’s picture

Status: Needs review » Reviewed & tested by the community

I just installed the D9 version for the first time. I was taken aback to see that I would need to grant admin permissions to content editors in order for them to see the term lists. So this feature gets a +1 from me.

I applied the patch to our dev site and it granted the ability to access the three listed routes without the need for the 'administer taxonomy' permission.

vladimiraus’s picture

@gngn I went AWOL for couple of month.
@dcam - thanks for testing
Back now. Planning to commit it soon.

alfattal’s picture

This patch would also grant permission to administer Taxonomy Manager and not only to (Access taxonomy manager list) which is not desired for editor role. Editor role should only be able to make changes to the content and NOT make any changes to system config that will result in config mismatch. Is there any way to separate these two permissions?

  • VladimirAus committed 6a36aa0 on 2.0.x authored by gngn
    Issue #3259399 by gngn, VladimirAus, dcam, VladimirAus: Permissions per...
vladimiraus’s picture

Status: Reviewed & tested by the community » Fixed

Thank you. Committed.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.