Use exisitng aliases controlpanel permissions for aliases endpoint

plone · Oct 15, 2024 · a321ad4 · a321ad4
1 parent f68fab7
commit a321ad4
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 7 deletions.
diff --git a/news/1820.bugfix b/news/1820.bugfix
@@ -0,0 +1,2 @@
+Use exisitng aliases controlpanel permissions for aliases endpoint as well
+[jackahl]
diff --git a/src/plone/restapi/services/aliases/configure.zcml b/src/plone/restapi/services/aliases/configure.zcml
@@ -8,7 +8,7 @@
       accept="application/json,application/schema+json"
       factory=".get.AliasesGet"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
@@ -17,7 +17,7 @@
       accept="text/csv"
       factory=".get.AliasesGet"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
@@ -26,39 +26,39 @@
       accept="application/json,application/schema+json"
       factory=".get.AliasesGet"
       for="Products.CMFCore.interfaces.IContentish"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="POST"
       factory=".add.AliasesPost"
       for="*"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="POST"
       factory=".add.AliasesRootPost"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
   <plone:service
       method="DELETE"
       factory=".delete.AliasesDelete"
       for="*"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="DELETE"
       factory=".delete.AliasesDelete"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		Use exisitng aliases controlpanel permissions for aliases endpoint as well
		[jackahl]