Currently a user will get a "scheduled" tab on their profile page if they have permission to "schedule publishing of {type}", that is they are allowed to enter scheduling dates for the entity type in question.

However, this could be unnecessarily restrictive, and there is a use case where the user has permission to view scheduled content (maybe scheduled by someone with higher authority) but does not have permission to enter/edit those dates. In this case, currently, they would not get any scheduled tab on their user page, even if they do have content which has been scheduled by another user.

The proposal is to allow access to the user view if the user has either of the Scheduler permissions for the entity type, not just the one permission.

The equivalent change for viewing another users page is also appropriate.

Issue fork scheduler-3272548

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

jonathan1055 created an issue. See original summary.

jonathan1055 opened merge request !41

jonathan1055’s picture

jonathan1055 commented
Title: Extended permission for user 'scheduled' tab » 3272548-user-view-permissions

The first run will fail, to demonstrate the relaxing of conditions, but without the test being chnaged.

jonathan1055’s picture

jonathan1055 commented
Title: 3272548-user-view-permissions » Extended permission for user 'scheduled' tab

Two failures for testViewScheduledContentUser as expected -
Current response status code is 200, but 403 expected

  • jonathan1055 committed 2ca97d6 on 2.x 
    Issue #3272548 by jonathan1055: Extended permission for user 'scheduled...
jonathan1055’s picture

jonathan1055 commented
Status: Active » Fixed

Merged.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.