#3576540: Authenticated users should not have permission to access the dashboard by default, because there's nothing for them to do there
#3576441: Initialize Varbase Users Base recipe
#3576455: Add Varbase Users Base recipe to run before all recipes in Varbase Starter
The Varbase Admin Base recipe only granted access navigation and access toolbar to the authenticated role.
It did not assign any admin-related permissions to the specific Varbase user roles (content_editor, content_admin, seo_admin,
site_admin).
Replaced the generic user.role.authenticated permission grants with role-specific grantPermissions for each Varbase user role (excluding
anonymous and authenticated).
user.role.content_editor (13 permissions)access admin audit trail — admin_audit_trailaccess administration pages — systemaccess coffee — coffeeaccess contextual links — contextualaccess navigation — navigationaccess taxonomy manager list — taxonomy_manageraccess trash — trashclone node entity — entity_clonerestore node entities — trashrestore taxonomy_term entities — trashview deleted entities — trashview the administration theme — systemview welcome dashboard — navigationuser.role.content_admin (26 permissions)content_editor permissions, plus:access navigation extra tools cache flushing — navigation_extra_toolsaccess navigation extra tools cron — navigation_extra_toolsadminister footer menu items — menu_admin_per_menuadminister main menu items — menu_admin_per_menuclone block entity — entity_cloneclone block_content entity — entity_cloneclone menu_link_content entity — entity_cloneclone taxonomy_term entity — entity_cloneclone taxonomy_vocabulary entity — entity_cloneclone user entity — entity_clonerestore block_content entities — trashrestore file entities — trashrestore media entities — trashuser.role.seo_admin (9 permissions)access admin audit trail — admin_audit_trailaccess administration pages — systemaccess coffee — coffeeaccess contextual links — contextualaccess navigation — navigationaccess trash — trashview deleted entities — trashview the administration theme — systemview welcome dashboard — navigationuser.role.site_admin (42 permissions)content_admin permissions, plus:administer account menu items — menu_admin_per_menuadminister admin menu items — menu_admin_per_menuadminister tools menu items — menu_admin_per_menuassign roles — roleassignmasquerade as authenticated — masquerademasquerade as content_admin — masquerademasquerade as content_editor — masquerademasquerade as seo_admin — masquerademasquerade as site_admin — masqueradepurge block_content entities — trashpurge file entities — trashpurge media entities — trashpurge node entities — trashpurge taxonomy_term entities — trashuser.role.administratorNot included. The administrator role has is_admin: true, which automatically grants all permissions in the system.
admin_audit_trail, coffee, entity_clone, masquerade, menu_admin_per_menu, navigation, navigation_extra_tools, roleassign, taxonomy_manager, trash
autosave_form, config_perms (admin-only), eca_vbo, gin (theme), gin_everywhere, gin_login, gin_toolbar, gin_type_tray, length_indicator, revision_log_default,
settings_tray, syslog, taxonomy_access_fix (dynamic/per-vocabulary), ui_icons, update (admin-only)
Comments
Comment #2
rajab natshahComment #4
rajab natshahComment #5
rajab natshahComment #6
rajab natshahComment #8
rajab natshahComment #9
rajab natshahComment #10
rajab natshah✅ Released varbase_admin_base-1.0.0-alpha1