>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3533308. --> Reported by: [tarawij](https://www.drupal.org/user/3675871) Related to !98 >>> <h3 id="summary-problem-motivation">Problem/Motivation</h3> <p>The Book module's settings page (`/admin/structure/book/settings`) currently uses the broad `administer site configuration` permission. This allows users to access all site configuration pages, which is excessive for someone who only needs to manage Book settings.</p> <h4 id="summary-steps-reproduce">Steps to reproduce</h4> <p>A user without the `administer site configuration` permission is denied access to the Book module settings form at `/admin/structure/book/settings`.</p> <h3 id="summary-proposed-resolution">Proposed resolution</h3> <ul> <li>Introduce a new custom permission: `administer book settings`.</li> <li>Restrict access to the Book settings form using this new permission.</li> <p><b></b></p> <li>Update:</li> <p> - `book.permissions.yml` to define the permission<br> - `book.routing.yml` to apply it to the settings route </p></ul> <h3 id="summary-remaining-tasks">Remaining tasks</h3> <h3 id="summary-ui-changes">User interface changes</h3> <p>N/A</p> <h3 id="summary-api-changes">API changes</h3> <p>N/A</p> <h3 id="summary-data-model-changes">Data model changes</h3> <p>N/A</p>