Following on from the sterling work at https://www.drupal.org/node/2856833 it seems that a user with the relevant "Manipulate *" permission can still delete a queue via its admin menu link. I'd argue that this behaviour is a bug and that only users with the "Administer entityqueue" permission should be able to do this.

CommentFileSizeAuthor
#3 only-users-with-administer-entityqueue-should-be-able-to-delete-entityqueues-2916026-3.patch868 bytesOmar Alahmed
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

danbohea created an issue. See original summary.

amateescu’s picture

amateescu CreditAttribution: amateescu for Pfizer, Inc. commented

That's a very good point! Do you want to work on a patch for fixing this bug? :)

Omar Alahmed’s picture

Omar Alahmed
Primary language English
Location Jordan
CreditAttribution: Omar Alahmed at Vardot commented
FileSize
only-users-with-administer-entityqueue-should-be-able-to-delete-entityqueues-2916026-3.patch868 bytes

Good point @danbohea. The following patch should solve the issue.

Omar Alahmed’s picture

Omar Alahmed
Primary language English
Location Jordan
CreditAttribution: Omar Alahmed at Vardot commented
Status: Active » Needs review
Omar Alahmed’s picture

Omar Alahmed
Primary language English
Location Jordan
CreditAttribution: Omar Alahmed at Vardot commented

You can also check: Only users with "Administer entityqueue" should be able to edit (configure) entityqueues https://www.drupal.org/node/2917308

  • amateescu committed deede74 on 8.x-1.x authored by Omar Alahmed 
    Issue #2916026 by Omar Alahmed: Only users with "Administer entityqueue...
amateescu’s picture

amateescu CreditAttribution: amateescu for Pfizer, Inc. commented
Status: Needs review » Fixed

Good one :) Committed and pushed to 8.x-1.x. Thanks!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.