Clarify editor permissions

Revoke misleading user create/batch privileges. (fix omeka#1856)
Daniel-KM · Jun 20, 2022 · 71c2d6c · 71c2d6c
1 parent b86254c
commit 71c2d6c
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/application/src/Service/AclFactory.php b/application/src/Service/AclFactory.php
@@ -400,7 +400,7 @@ protected function addRulesForAuthor(Acl $acl)
         );
         $acl->allow(
             'author',
-            'Omeka\Controller\Admin\ResourceTemplate',
+           'Omeka\Controller\Admin\ResourceTemplate',
             ['add-new-property-row', 'import']
         );
         $acl->allow(
@@ -768,7 +768,8 @@ protected function addRulesForEditor(Acl $acl)
         );
         $acl->allow(
             'editor',
-            'Omeka\Api\Adapter\UserAdapter'
+            'Omeka\Api\Adapter\UserAdapter',
+            ['read', 'update', 'search']
         );
         $acl->allow(
             'editor',