Verified Commit df0fb9b8 authored by Jess's avatar Jess
Browse files

Issue #3454605 by thejimbirch, pooja_sharma, phenaproxima, the_g_bomb, catch,... 

Issue #3454605 by thejimbirch, pooja_sharma, phenaproxima, the_g_bomb, catch, b_sharpe: Roles should be in their own recipes for composability

(cherry picked from commit 8969fdb9)
parent 23f09d3f

core/recipes/administrator_role/recipe.yml

0 → 100644
+12 −0
Original line number Diff line number Diff line 
name: 'Administrator role'

description: 'Provides the Administrator role.'

type: 'User role'

config:

  actions:

    user.role.administrator:

      # If this role already exists, then this action has no effect. If it doesn't exist, we'll create it with the following values.

      ensure_exists:

        id: administrator

        label: Administrator

        weight: 3

        is_admin: true

core/recipes/content_editor_role/recipe.yml

0 → 100644
+15 −0
Original line number Diff line number Diff line 
name: 'Content editor role'

description: 'Provides the Content editor role.'

type: 'User role'

config:

  actions:

    user.role.content_editor:

      # If this role already exists, then this action has no effect. If it doesn't exist, we'll create it with the following values.

      ensure_exists:

        id: content_editor

        label: 'Content editor'

        weight: 2

        is_admin: false

        permissions:

          - 'access administration pages'

          - 'view own unpublished content'

core/recipes/standard/config/user.role.administrator.yml

deleted100644 → 0
+0 −8
Original line number Diff line number Diff line 
langcode: en

status: true

dependencies: {  }

id: administrator

label: Administrator

weight: 3

is_admin: true

permissions: {  }

core/recipes/standard/config/user.role.content_editor.yml

deleted100644 → 0
+0 −23
Original line number Diff line number Diff line 
langcode: en

status: true

dependencies: {  }

id: content_editor

label: 'Content editor'

weight: 2

is_admin: false

permissions:

  - 'access administration pages'

  - 'access content overview'

  - 'access contextual links'

  - 'access files overview'

  - 'access toolbar'

  - 'administer url aliases'

  - 'create terms in tags'

  - 'create url aliases'

  - 'edit own comments'

  - 'edit terms in tags'

  - 'delete own files'

  - 'revert all revisions'

  - 'view all revisions'

  - 'view own unpublished content'

  - 'view the administration theme'

core/recipes/standard/recipe.yml

+21 −4
Original line number Diff line number Diff line
@@ -19,6 +19,8 @@ recipes: 
  - user_picture

  # Provides a fallback text format which is available to all users.

  - restricted_html_format

  - administrator_role

  - content_editor_role

install:

  - image

  - help
@@ -67,17 +69,32 @@ config: 
    system.site:

      simple_config_update:

        page.front: /node

    user.role.anonymous:

      grantPermission: 'access content'

    user.role.authenticated:

      grantPermission: 'delete own files'

      grantPermissions:

        - 'access content'

        - 'delete own files'

    user.role.content_editor:

      grantPermissions:

        - 'access content overview'

        - 'access contextual links'

        - 'access files overview'

        - 'access toolbar'

        - 'administer url aliases'

        - 'create terms in tags'

        - 'create url aliases'

        - 'edit own comments'

        - 'edit terms in tags'

        - 'delete own files'

        - 'revert all revisions'

        - 'view all revisions'

        - 'view the administration theme'

      grantPermissionsForEachNodeType:

        - 'create %bundle content'

        - 'delete %bundle revisions'

        - 'delete own %bundle content'

        - 'edit own %bundle content'

    user.role.anonymous:

      # This recipe assumes all published content should be publicly accessible.

      grantPermission: 'access content'

    user.settings:

      simple_config_update:

        verify_mail: true