- Issue created by @heddn
- Merge request !8Draft: Fix various problems for workspace workflows and improve the test workflow... → (Closed) created by heddn
With the introduction of the workflow module for workspaces, we need to handle
#2968850: Figure out use-cases for per-workspace permissions and provide them if needed →
. Each transition needs to have a derived permission provided. Otherwise, we have to give the overly broad permission administer workspaces.
Configure a workflow for a workspace with that sub-module. Then don't give the user `administer workspaces` permission (and make sure you aren't user 1). The ability to transition the workflow does not exist because the %transition any workspace permission doesn't exist and the user doesn't have that access.
See WorkspaceAccessControlHandler::checkAccess()
// Check if the user has permission to access all workspaces.
$access_result = AccessResult::allowedIfHasPermission($account, $permission_operation . ' any workspace');
Active
2.0
Code