Commit 71ad125a authored by vincent baronnet's avatar vincent baronnet
Browse files

Issue #3280169 by Barry_Fisher: Access control on admin paths should not rely on administrator role

parent 74524f64
Loading
Loading
Loading
Loading
+1 −1
Original line number Diff line number Diff line
@@ -454,7 +454,7 @@ function domain_entity_entity_access(EntityInterface $entity, $operation, Accoun
  // Ensure quick administration.
  $user = User::load($account->id());
  $is_admin = \Drupal::service('router.admin_context')->isAdminRoute();
  if ($is_admin && $user->hasRole("administrator")) {
  if ($is_admin && ($user->hasRole("administrator") || $user->hasPermission('publish to any domain'))) {
    return AccessResult::neutral();
  }