Revisit permissions required to view contact messages

Created on 18 April 2016, almost 9 years ago

Updated 18 August 2024, 6 months ago

At present we use 'administer contact forms' to govern access to viewing/editing contact messages.

However this is too generic.

We should look into adding 'view', 'delete' and 'edit' permissions for contact messages.

Possibly on a per-form basis. See ✨ Per form based access permissions Needs work for that.

Decide on best permission set.
Patch.
Review.

Everything.

None

None

None

📌 Task

Status

Needs work

Version

1.0

Component

Code

Created by

🇦🇺Australia larowlan 🇦🇺🏝.au GMT+10

Live updates comments and jobs are added and updated live.

Incomplete comments

Merge Requests

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Comment over 1 year ago →
🇵🇱Poland adpo
Also tested #62 but I don't see any permission setting I'm afraid. I have run update.php and cleared the cache.

Is there anything else I need to do?
Merge request !17Issue 2708809: Permissions → (Open) created by berdir
Status changed to Needs work 6 months ago8:39am 18 August 2024
Comment 6 months ago →
🇨🇭Switzerland berdir Switzerland
Sorry for letting this sit so long, still applies but will need some updates for tests to work.

contact_storage_entity_type_alter() has a todo to add an access control handler, not sure if it's worth adding one, but we should at least remove that todo.

Production build 0.71.5 2024