- 🇺🇸United States joshuami Portland, OR
I can verify this patch does indeed fix the action to use the correct permission. The tests are failing because the test doesn't expect the permission in ViewsBulkEditModifyEntityValuesTest.
The module provides "use views bulk edit" permission.
Permission is applied only for /admin/content/bulk-edit route.
It seems that this permission should also be respected when showing the "Modify field values" action on a view.
Currently, even the users without this permission are able to see the action.
Enable the module and VBO module.
Create or edit any view
Add a "Views bulk operations" field (global)
Check the "Modify field values" action
Make sure to have a user without the "use views bulk edit" permission
Log in as that user
Access the view where "Modify field values" action is setup
The action should not be visible, but it is.
Add requirements annotation to the "Modify field values" action with _permission set to "use views bulk edit".
Needs work
2.6
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
I can verify this patch does indeed fix the action to use the correct permission. The tests are failing because the test doesn't expect the permission in ViewsBulkEditModifyEntityValuesTest.