Contrib.social

The "administer {homebox_type} preset" permission is not used for the routing.yml preset routes

Open on Drupal.org →
Created on 8 April 2024, about 1 year ago
Updated 23 April 2024, 12 months ago

Problem/Motivation

Currently, the "administer {homebox_type} preset" permission is not used for the routing.yml preset routes. Instead, all preset routes in the routing.yml are using "administer homebox types".

Furthermore, it seems that the "HomeboxTypeAccessControlHandler" is missing quite a few operations to access check for. And some of them, like the "entity.homebox.set_default_preset" seems to be implemented in both the "HomeboxTypeAccessControlHandler" and in the routing.yml. Here the routing.yml implementation seems to be favored, which uses the incorrect "administer homebox types" permission.

Steps to reproduce

Proposed resolution

Adjust both the HomeboxTypeAccessControlHandler and the routing.yml to define the right access control without defining duplicate entries.

Remaining tasks

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Fixed

Version

3.0

Component

Code

Created by

🇩🇪Germany Grevil

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024