Why does "Check for update" operation require "Administer media" permission?

Created on 30 August 2023, about 1 year ago
Updated 12 October 2023, about 1 year ago

Problem/Motivation

A non-admin user can view the list of Media assets in Drupal at /admin/content/media, and any DAM assets that appear there show the "Check for update" operation as the first item. Clicking on this takes the user to '/acquia-dam/check-version/{media}', which requires the "Administer media" permission.

This permission would never be given to standard content authors. When a user clicks this option, they get sent to a 403 error. It is confusing and unhelpful.

Proposed resolution

Create a new module permission to manage access to this screen, or hide this operation from users who do not have the relevant permission to do so.

πŸ› Bug report
Status

Fixed

Version

1.0

Component

User interface

Created by

πŸ‡ΊπŸ‡ΈUnited States nessthehero

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024