Allow restriction of which operations are controlled by WBA

Created on 15 May 2024, 7 months ago

Problem/Motivation

Since πŸ› workbench_access_entity_access should cache per user, or a new WBA specific cache context (per section) Fixed we cache per user, however this can unexpectedly cause pages to be UNCACHEABLE by Dynamic page cache when they should be. For example, upgrading a site to 2.0.2 caused a page with an embedded webform to be uncacheable because the submission_create operation was passing through WBA. While there might be a usecase for restricting the submission of webforms, I can't see that being very common. Most of the time it'll be update and delete permissions only.

Proposed resolution

We could add a configuration option to limit the operations we are checking for. We could maintain the current "everything but view and view label" as the default.

Remaining tasks

Agree on approach
Code
Test
Review
Commit

User interface changes

API changes

Data model changes

✨ Feature request
Status

Active

Version

2.0

Component

Code

Created by

πŸ‡¦πŸ‡ΊAustralia acbramley

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024