fix: #3630118 Stop granting admin permissions to the authenticated role

Rajab Natshahrequested to merge
issue/varbase_admin_base-3630118:3630118-authenticated-role-permissions into 1.0.x

Issue: https://www.drupal.org/project/varbase_admin_base/issues/3630118

The recipe granted the authenticated role access navigation, access administration pages, view the administration theme, access coffee and access contextual links, so a plain logged-in user saw the Navigation sidebar and top bar. The authenticated role now keeps only view any term; the editorial roles keep these through their own grants.

Checked on a Varbase 11.0.x-dev DDEV site: after revoking, the Normal user has no access navigation, while Content admin, SEO admin and Site admin still have it. Local gitlab-ci-local run green (composer validate, YAML lint).

AI-Generated: Yes

Checkpoints:

  • File an issue
  • Addition/Change/Update/Fix
  • Testing to ensure no regression
  • Automated unit testing coverage
  • Automated functional testing coverage
  • UX/UI designer responsibilities
  • Readability
  • Accessibility
  • Performance
  • Security
  • Developer Documentation
  • User Guide Documentation
  • Reviewed by human
  • Code review by maintainers
  • Full testing and approval
  • Credit contributors
  • Review with the product owner
  • Release notes snippet
  • Release
Edited by Rajab Natshah

Merge request reports