Permission allow anonymous user to import a csv

Created on 9 April 2021, over 3 years ago
Updated 12 June 2023, over 1 year ago

We have a webform that allow anonymous to see all the submissions, and on which they can not make any submission. All the data entering it's done with an administrator account. When we set the permissions despite the anonymous it's not allowed to submit the form he is able to import an csv with content has he goes to the tab results on the webform. How can we set the correct permission for this?

thank you,
Miguel Gamito

πŸ’¬ Support request
Status

Closed: won't fix

Version

6.0

Component

Code

Created by

πŸ‡΅πŸ‡ΉPortugal mig2fly

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡«πŸ‡·France mably

    Hi @jrockowitz, why is the "update any submission" not applied to the node specific route?

    entity.node.webform_submission_export_import.results_import:
      path: '/node/{node}/webform/results/upload'
      defaults:
        _form: '\Drupal\webform_submission_export_import\Form\WebformSubmissionExportImportUploadForm'
        _title_callback: '\Drupal\Core\Entity\Controller\EntityController::title'
        operation: webform_submission_view
        entity_access: 'webform.submission_view_any'
      options:
        parameters:
          node:
            type: 'entity:node'
      requirements:
        _custom_access: '\Drupal\webform_node\Access\WebformNodeAccess::checkWebformResultsAccess'
    

    We can see that the following line is missing:

    _entity_access: 'webform.submission_update_any'

    Is there any specific reason for that? Could it be added?

    Thanks.

  • πŸ‡ΊπŸ‡ΈUnited States jrockowitz Brooklyn, NY

    This looks like a mistake that we can fix. Please create a new ticket.

  • πŸ‡«πŸ‡·France mably

    Thanks for your quick answer, issue has been created: https://www.drupal.org/project/webform/issues/3366265 πŸ› Missing requirement for node specific submission import route Active

Production build 0.71.5 2024