task: #3608646 Switch to a Default Varbase Core recipe and drop the use of the Module Installer Factory class for permissions

Rajab Natshahrequested to merge
issue/varbase_core-3608646:3608646-switch-to-a into 9.2.x

Closes #3608646.

Move the role permission grants into recipes/default/recipe.yml (config actions only; module installation, optional-config imports and entity updates stay procedural, unchanged) for varbase_core and its submodules varbase_admin, varbase_internationalization, varbase_page, varbase_security, varbase_tour and varbase_webform. Drop config/permissions/ everywhere. Call the recipe at the end of each hook_install() instead of ModuleInstallerFactory::addPermissions().

varbase_development and varbase_update_helper had no real permissions to grant (all-empty config/permissions files), so those are simply removed along with the addPermissions() call; the now-unused ModuleInstallerFactory import is dropped from varbase_update_helper.install.

Also creates the editor/content_admin/site_admin/seo_admin roles in CI before the test recipe applies (needed for the strict Recipe grants; Standard doesn't ship them). Same pattern as Varbase API / Varbase Media / Varbase Blog / Varbase Bootstrap Paragraphs / Varbase Carousels / Varbase Total Control Dashboard / Varbase Workflow.

AI-Generated: Yes (Used Claude Code to port the Recipe-permissions pattern to varbase_core and its submodules).

Checkpoints

  • File an issue about this project
  • Addition/Change/Update/Fix to this project
  • Testing to ensure no regression
  • Automated unit/functional testing coverage
  • Developer Documentation support on feature change/addition
  • User Guide Documentation support on feature change/addition
  • UX/UI designer responsibilities
  • Accessibility and Readability
  • Reviewed by a human
  • Code review by maintainers
  • Full testing and approval
  • Credit contributors
  • Review with the product owner
  • Update Release Notes
  • Release
Edited by Rajab Natshah

Merge request reports