Use existing aliases controlpanel permissions for aliases endpoint (#…

…1825) * Use exisitng aliases controlpanel permissions for aliases endpoint * Use ManagePortalAliases for alias delete endpoint on siteroot Co-authored-by: David Glick <david@glicksoftware.com> * Update news/1820.bugfix --------- Co-authored-by: David Glick <david@glicksoftware.com>
plone · Oct 16, 2024 · b9a56e1 · b9a56e1
1 parent f68fab7
commit b9a56e1
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 7 deletions.
diff --git a/news/1820.bugfix b/news/1820.bugfix
@@ -0,0 +1 @@
+Aliases endpoint: Use "Manage Portal Aliases" and "Manage Content Aliases" permissions. @jackahl
diff --git a/src/plone/restapi/services/aliases/configure.zcml b/src/plone/restapi/services/aliases/configure.zcml
@@ -8,7 +8,7 @@
  accept="application/json,application/schema+json"
  factory=".get.AliasesGet"
  for="Products.CMFPlone.interfaces.IPloneSiteRoot"
- permission="zope2.View"
+ permission="Products.CMFPlone.ManagePortalAliases"
  name="@aliases"
  />
 
@@ -17,7 +17,7 @@
  accept="text/csv"
  factory=".get.AliasesGet"
  for="Products.CMFPlone.interfaces.IPloneSiteRoot"
- permission="zope2.View"
+ permission="Products.CMFPlone.ManagePortalAliases"
  name="@aliases"
  />
 
@@ -26,39 +26,39 @@
  accept="application/json,application/schema+json"
  factory=".get.AliasesGet"
  for="Products.CMFCore.interfaces.IContentish"
- permission="zope2.View"
+ permission="Products.CMFPlone.ManageContextAliases"
  name="@aliases"
  />
 
  <plone:service
  method="POST"
  factory=".add.AliasesPost"
  for="*"
- permission="cmf.ModifyPortalContent"
+ permission="Products.CMFPlone.ManageContextAliases"
  name="@aliases"
  />
 
  <plone:service
  method="POST"
  factory=".add.AliasesRootPost"
  for="Products.CMFPlone.interfaces.IPloneSiteRoot"
- permission="cmf.ModifyPortalContent"
+ permission="Products.CMFPlone.ManagePortalAliases"
  name="@aliases"
  />
 
  <plone:service
  method="DELETE"
  factory=".delete.AliasesDelete"
  for="*"
- permission="cmf.ModifyPortalContent"
+ permission="Products.CMFPlone.ManageContextAliases"
  name="@aliases"
  />
 
  <plone:service
  method="DELETE"
  factory=".delete.AliasesDelete"
  for="Products.CMFPlone.interfaces.IPloneSiteRoot"
- permission="cmf.ModifyPortalContent"
+ permission="Products.CMFPlone.ManagePortalAliases"
  name="@aliases"
  />