Discovered during 📌 Add new setting for how unattended updates will be run Fixed .
Right now, you need the "administer software updates" permission to run status checks via the status report page. This is incongruous, since you only need "administer site configuration" to view the status report at all.
Change the status check route so that it has the same permissions as the system.status route.
In addition to being better UX, this has the added benefit of allowing us to simplify StatusCheckTest, which will no longer need two separate user accounts (one for viewing the status report, and one for running the checks).
Active
3.0
Code
Wow, great catch! Love that this improves usability and allows us to simplify tests!