search

pimcore / generic-data-index-bundle

Other
3 stars 1 forks source link

Permission conditions for search services need to be based on list permission instead of view permission #143

Closed markus-moser closed 2 months ago

markus-moser commented 2 months ago

Currently PermissionTypes::VIEW is used as the base permission for all our permission checks and OpenSearch workspace conditions. In Pimcore there is the distinction between PermissionTypes::LIST and PermissionTypes::VIEW. PermissionTypes::LIST would be the correct base permission. With this it is possible to make items listable but not viewable. Then they are shown in the tree/grid but the user is not allowed to open them. We have the same behaviour also in the admin UI classic bundle.

markus-moser commented 2 months ago

@lukmzig Could you please check this?