Change permission on Dependency Service `getDependentItems` to `PERMISSION_CONTENT_READ` - Githubissues

craftercms / craftercms

Parent project for Crafter CMS. Issue tracking across all repositories and global builds.

GNU General Public License v3.0

288 stars 98 forks source link

Change permission on Dependency Service `getDependentItems` to `PERMISSION_CONTENT_READ` #6873

Open russdanner opened 1 month ago

russdanner commented 1 month ago

CI: 5084

Duplicates

[X] I have searched the existing issues

Latest version

[x] The issue is in the develop branch
[x] The issue is in the latest released 4.1.x
[ ] The issue is in the latest released 4.0.x
[ ] The issue is in the latest released 3.1.x

Describe the issue

In the service: https://github.com/craftercms/studio/blob/v4.1.2/src/main/java/org/craftercms/studio/impl/v2/service/dependency/DependencyServiceImpl.java

Method getDependentItems method has the follwing annotation: @HasPermission(type = CompositePermission.class, action = PERMISSION_CONTENT_DELETE)

But should be: PERMISSION_CONTENT_READ

Steps to reproduce

Steps: N/A

Relevant log output

No response

Screenshots and/or videos

No response