From 76f1d0fcb1598e2dc0c01fb8c953b890da88c674 Mon Sep 17 00:00:00 2001
From: owenbush <owenbush@2765259.no-reply.drupal.org>
Date: Mon, 20 Apr 2020 15:32:42 -0600
Subject: [PATCH] Issue #3124615 by owenbush, the_glitch: Access is denied to
edit/delete Series and Instances from non Admin roles
---
src/EventInstanceAccessControlHandler.php | 4 ++--
src/EventSeriesAccessControlHandler.php | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/EventInstanceAccessControlHandler.php b/src/EventInstanceAccessControlHandler.php
index 1a2bf5b8..c1b42ab0 100644
--- a/src/EventInstanceAccessControlHandler.php
+++ b/src/EventInstanceAccessControlHandler.php
@@ -31,13 +31,13 @@ class EventInstanceAccessControlHandler extends EntityAccessControlHandler {
case 'edit':
if ($account->id() !== $entity->getOwnerId()) {
- return AccessResult::allowedIfHasPermission($account, 'edit eventinstance entities');
+ return AccessResult::allowedIfHasPermission($account, 'edit eventinstance entity');
}
return AccessResult::allowedIfHasPermission($account, 'edit own eventinstance entity');
case 'delete':
if ($account->id() !== $entity->getOwnerId()) {
- return AccessResult::allowedIfHasPermission($account, 'delete eventinstance entities');
+ return AccessResult::allowedIfHasPermission($account, 'delete eventinstance entity');
}
return AccessResult::allowedIfHasPermission($account, 'delete own eventinstance entity');
diff --git a/src/EventSeriesAccessControlHandler.php b/src/EventSeriesAccessControlHandler.php
index 67d607f9..b06f86d4 100644
--- a/src/EventSeriesAccessControlHandler.php
+++ b/src/EventSeriesAccessControlHandler.php
@@ -31,13 +31,13 @@ class EventSeriesAccessControlHandler extends EntityAccessControlHandler {
case 'edit':
if ($account->id() !== $entity->getOwnerId()) {
- return AccessResult::allowedIfHasPermission($account, 'edit eventseries entities');
+ return AccessResult::allowedIfHasPermission($account, 'edit eventseries entity');
}
return AccessResult::allowedIfHasPermission($account, 'edit own eventseries entity');
case 'delete':
if ($account->id() !== $entity->getOwnerId()) {
- return AccessResult::allowedIfHasPermission($account, 'delete eventseries entities');
+ return AccessResult::allowedIfHasPermission($account, 'delete eventseries entity');
}
return AccessResult::allowedIfHasPermission($account, 'delete own eventseries entity');
--
GitLab