- Status changed to Closed: outdated
over 1 year ago 10:32am 24 January 2023 - 🇩🇪Germany webflo
Fixed with 🐛 Fix permission check for message bulk delete Fixed
Action id "message_delete_action" access looks like this:
/**
* {@inheritdoc}
*/
public function access($object, AccountInterface $account = NULL, $return_as_object = FALSE) {
return $account->hasPermission('adminster messages');
}
But message.routing.yml uses different permission
message.multiple_delete_confirm:
path: '/admin/content/message/delete'
defaults:
_form: '\Drupal\message\Form\DeleteMultiple'
requirements:
_permission: 'administer message templates'
As a result of this, user with only adminster messages permission isn't allowed to remove messages.
Closed: outdated
1.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Fixed with 🐛 Fix permission check for message bulk delete Fixed