Ensure the appropriate permissions are used for the routes and toolbar

Created on 9 November 2020, over 4 years ago
Updated 30 September 2024, 7 months ago

Problem/Motivation

If the Access taxonomy manager list permission is not granted, the user still can access the main page with a top level tree.

It also only shows the Add and Delete buttons only if the user has a specific create terms in %term permission. It should call the access check handler and check if they are allowed to create terms instead.

Proposed solution

When user visits /admin/structure/taxonomy_manager/voc/VOCAB both permissions should be checked:

  • Access taxonomy manager list
  • _entity_create_access: 'taxonomy_term:{taxonomy_vocabulary}'

As well as use appropriate permission checks for the toolbar button access

🐛 Bug report
Status

Active

Version

2.0

Component

Code

Created by

🇦🇺Australia VladimirAus Brisbane, Australia

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024