UserPermissionsForm should filter authenticated user permissions from other roles on save

Created on 25 January 2024, about 1 year ago

Problem/Motivation

UserPermissionsForm has clientside JS to demonstrate to the user that when a permission is checked for "authenticated user", it also applies to all logged in roles.

However, this is not handled separately on save, so redundant permissions can be saved to roles.

Steps to reproduce

  • Install with the Standard profile.
  • Export role config and note that "content editor" has "access contextual links" permission.
  • At /admin/people/permissions grant "access contextual links" to "authenticated user".
  • Export role config again; "authenticated user" has "access contextual links", but so does "content editor", and this is redundant.

Proposed resolution

Filter authenticated user permissions from other logged-in roles on save.

Merge request link

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet

πŸ“Œ Task
Status

Needs work

Version

11.0 πŸ”₯

Component
User systemΒ  β†’

Last updated 1 day ago

Created by

πŸ‡¬πŸ‡§United Kingdom longwave UK

Live updates comments and jobs are added and updated live.
  • Needs tests

    The change is currently missing an automated test that fails when run with the original code, and succeeds when the bug has been fixed.

Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024