Skip to content

Commit

Permalink
BUGFIX: Correctly define manage assets privilege
Browse files Browse the repository at this point in the history
The previously defined privilege on the controller had no effect as the controller
didn’t have any relevant actions to modify assets.

Therefore the privilege was adjusted to target the mutationresolver which contains
all methods to modify assets.
  • Loading branch information
Sebobo committed Aug 13, 2024
1 parent 08667d3 commit 0382cb4
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Configuration/Policy.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
privilegeTargets:
'Neos\Flow\Security\Authorization\Privilege\Method\MethodPrivilege':
'Flowpack.Media.Ui:ManageAssets':
matcher: 'method(public Flowpack\Media\Ui\Controller\MediaController->(.*)Action())'
matcher: 'method(Flowpack\Media\Ui\GraphQL\Resolver\Type\MutationResolver->.*())'
'Flowpack.Media.Ui:Queries':
matcher: 'method(public Flowpack\Media\Ui\GraphQL\Resolver\(.*)Resolver->.*()) || method(t3n\GraphQL\Controller\GraphQLController->queryAction())'

Expand Down

0 comments on commit 0382cb4

Please sign in to comment.