Wrong permission configuration for any role other than admin.

trea → changed the visibility of the branch 1.x to hidden.

Thanks for raising awareness of this problem.

In the route it's used without a dot.

Would not it be enough fixing the route definition then? I would be surprised if a dot in the permission key would cause a trouble... but hey, I am still open for surprises in Drupal :)

This bug also means that something is not covered by our current test suite, so a failing test would great.

Please test my fix from MR#2.

Please test my fix from MR#2.

Went ahead, merged the MR, will release a tagged version soon. Please test it and close this issue if the issue you experienced got resolved. Thank you