Contrib.social

Give test user lesser permission inApiAutoSaveControllerTest::testDelete

Open on Drupal.org →
Created on 14 July 2025, about 1 month ago

Overview

Follow-up to the last MR fixed on 🐛 Pending changes leaking entities that user might have no access to Active ,

I added

// Verify auto-save data exists.
    // Set up a user that has 'view label' access to both entities.
    $this->setUpCurrentUser(permissions: [
      JavaScriptComponent::ADMIN_PERMISSION,
    ]);

But the user could have user a lesser, non-admin permission

Proposed resolution

Change to 

 // Verify auto-save data exists.
    // Set up a user that has 'view label' access to both entities.
    $this->setUpCurrentUser(permissions: [
      Page::EDIT_PERMISSION,
    ]);

User interface changes

📌 Task
Status

Active

Version

0.0

Component

Auto-save

Created by

🇺🇸United States tedbow Ithaca, NY, USA

Live updates comments and jobs are added and updated live.
  • Novice

    It would make a good project for someone who is new to the Drupal contribution process. It's preferred over Newbie.

Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024