While creating or updating webform submission via , the webform access settings are ignored.
1. Set up REST client for create/update a webform submission.
2. Go to respective webform >> Settings >> Access
3. remove all roles from creating webform submission.
4. Now call create submission rest API ( REST Client).
5. Webform submissions are created successfully , even though no role can create submission permission set
My patch for the fix attached.
This patch includes delete API for webform submission also
Fixed
4.0
Code
Hey shermiep, thanks for the feedback.
Commited the patch and added the same logic to the get submission resource. Now to be able to see submissions the user need to also have the correct permissions
Automatically closed - issue fixed for 2 weeks with no activity.