Contrib.social

Permissions issues

Open on Drupal.org →
Created on 4 March 2025, about 1 month ago

Problem/Motivation

The permissions are incorrectly configured. Specifically the permission to view the list is used as the admin permission for the data_pipelines entity. The admin permission for the destination entity doesn't even exist and the permission access control handler doesn't inherit parent, meaning that admin permission overrides don't work as expected.

Steps to reproduce

Set up a user with 'administer data_pipelines' and try to view and/or edit data_pipeline entities or destination entities.

Proposed resolution

Fix the permissions.

Remaining tasks

User interface changes

API changes

The data_pipelines list permission will be reverted to only list entities. The admin permission will now provide access to destination entities.

Data model changes

🐛 Bug report
Status

Active

Version

1.0

Component

Code

Created by

🇦🇺Australia nterbogt

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024