Rename view all revisions entity access operation to view revision overview

Created on 2 November 2023, about 1 year ago

Problem/Motivation

In the new generic revision access issue, we added a permission view all revisions, separate from view revision.

That is actually used only for the overview page, so I think we should rename it.

With the current name, it's unclear what the purpose is, resulting in issues like 🐛 Information disclosure access bypass for revision log fields when the JSON:API module is enabled Fixed having to do an extra access check. Maybe?

\Drupal\Core\Entity\Routing\RevisionHtmlRouteProvider::getRevisionViewRoute actually doesn't do that either, so I think we could maybe skip that there?

Steps to reproduce

Proposed resolution

Rename to view revision overview, alias and deprecate the old one.

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet

📌 Task
Status

Active

Version

11.0 🔥

Component
Entity 

Last updated about 9 hours ago

Created by

🇨🇭Switzerland berdir Switzerland

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024