limited resource permissions after enabling REST resources. [#2946404]

I've installed the REST UI module and i've enabled watchdog, content and user REST resources. Only watchdog permissions show up People/Permissions UI config. If I try to access from the dropdown menu in the REST UI to change permissions for content and user, the browser links to permissions page but doesn't show relevant permissions.

is this is a bug?

if not, whats the policy for permissions on REST resources. It appears inconsistent as I expect all resources to have configurable permissions.

thanks

Comments

Comment #1

21 February 2018 at 11:51

laurencefass created an issue. See original summary.

Comment #2

Syntapse CreditAttribution: Syntapse commented 21 February 2018 at 11:52

Title:

enabling REST interfaces does not add to permissions in all cases.

» enabling REST resources only adding selective permissions.

Comment #3

Syntapse CreditAttribution: Syntapse commented 21 February 2018 at 12:09

Issue summary:

View changes

Comment #4

Syntapse CreditAttribution: Syntapse commented 21 February 2018 at 12:11

Issue summary:

View changes

Comment #5

Syntapse CreditAttribution: Syntapse commented 21 February 2018 at 14:15

Title:	enabling REST resources only adding selective permissions.	» limited resource permissions after enabling REST resources.
Issue summary:	View changes

Comment #6

Wim Leers

Ghent 🇧🇪🇪🇺

CreditAttribution: Wim Leers at Acquia commented 1 March 2018 at 15:50

Category:	Bug report	» Support request
Priority:	Major	» Normal
Status:	Active	» Fixed
Related issues:		+#2664780: Remove REST's resource- and verb-specific permissions for EntityResource, but provide BC and document why it's necessary for other resources

It appears inconsistent as I expect all resources to have configurable permissions.

This has not been true by default since Drupal 8.2, or for the past 1.5 year. See #2664780: Remove REST's resource- and verb-specific permissions for EntityResource, but provide BC and document why it's necessary for other resources. Change record: https://www.drupal.org/node/2733435.

Sites using REST since Drupal 8.0 or 8.1 still get the old behavior: they get auto-generated permissions even for entity REST resources. But since 8.2, we just rely on entity access. No more additional REST permissions, which made things needlessly complicated.