Duplicate operation should require 'create' permission

Open on Drupal.org →

Created on 2 July 2025, 4 days ago

Overview

In 📌 Update `ApiContentControllers::list()` to expose available content entity operations in `meta` Active we exposed the operations that can be executed on content.

The 'duplicate' operation relies on 'update' access, while it should be creation access.

Proposed resolution

Fix permissions + test

User interface changes

Duplicate will be visible only when we can create content.

🐛 Bug report

Status

Active

Version

0.0

Component

Internal HTTP API

Created by

🇪🇸Spain penyaskito Seville 💃, Spain 🇪🇸, UTC+2 🇪🇺

Live updates comments and jobs are added and updated live.

beta blocker

Sign in to follow issues

Merge Requests

!1222Duplicate operation should require 'create' permission
Open
🇪🇸Spain penyaskito
updated 1 day ago

Comments & Activities

Issue created by @penyaskito
Comment 4 days ago →
🇬🇧United Kingdom jessebaker
penyaskito → credited jessebaker → .
Comment 4 days ago →
🇪🇸Spain penyaskito Seville 💃, Spain 🇪🇸, UTC+2 🇪🇺
Jesse found this while working on ✨ Create React Permission Utilities Active
Merge request !1222Issue #3533728 by penyaskito, jessebaker: Duplicate operation should require 'create' permission → (Open) created by penyaskito
Comment 3 days ago →
🇪🇸Spain penyaskito Seville 💃, Spain 🇪🇸, UTC+2 🇪🇺
Comment 1 day ago →
🇧🇪Belgium wim leers Ghent 🇧🇪🇪🇺
Whoops! Silly oversight in 📌 Update `ApiContentControllers::list()` to expose available content entity operations in `meta` Active 😅
Comment 1 day ago →
🇧🇪Belgium wim leers Ghent 🇧🇪🇪🇺
Shoot, needs some test expectations to be updated in XbContentEntityHttpApiTest.

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024