Contrib.social

Admin page access denied even when access is given to child items (requesting 10.2 backport)

Open on Drupal.org →
Created on 11 July 2024, about 2 months ago
Updated 23 July 2024, about 2 months ago

Re-opened against D10.2 from 🐛 Admin page access denied even when access is given to child items RTBC

Problem/Motivation

🐛 Restrict access to empty top level administration pages Fixed introduced a bug where if a user does not have access to the child items of the first item of an admin page, the page gives an access denied, even if the user does have access to some other items. For me the first item was entity.taxonomy_vocabulary.collection, so denying access to that item resulted in the user not being able to access /admin/structure even though they did have access to add/edit menus.

Steps to reproduce

composer create-project drupal/recommended-project drupal.local
cd drupal.local
composer require drush/drush
vendor/bin/drush site:install
vendor/bin/drush user:create Jelle
vendor/bin/drush user:role:add content_editor Jelle
vendor/bin/drush role:perm:add content_editor "access taxonomy overview"

# Login as user 2 and check the toolbar, "Structure" should be there

composer require drupal/scheduler
vendor/bin/drush en scheduler

# Login as user 2 and check the toolbar, "Structure" is gone

Proposed resolution

Backport fix D10.3 to 10.2

Remaining tasks

Apply to next bugfix release of D10.2

User interface changes

N/A

API changes

N/A

Data model changes

N/A

Release notes snippet

If users have access to a child of an admin page, but not its first child, they will now have access to that admin page.

🐛 Bug report
Status

Closed: won't fix

Version

10.2 ✨

Component
System  →

Last updated 1 day ago

No maintainer
Created by

🇺🇸United States AaronBauman Philadelphia

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024