Use existing aliases controlpanel permissions for aliases endpoint (#…

…1825) * Use exisitng aliases controlpanel permissions for aliases endpoint * Use ManagePortalAliases for alias delete endpoint on siteroot Co-authored-by: David Glick <[email protected]> * Update news/1820.bugfix --------- Co-authored-by: David Glick <[email protected]>
plone · Oct 16, 2024 · b9a56e1 · b9a56e1
1 parent f68fab7
commit b9a56e1
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 7 deletions.
diff --git a/news/1820.bugfix b/news/1820.bugfix
@@ -0,0 +1 @@
+Aliases endpoint: Use "Manage Portal Aliases" and "Manage Content Aliases" permissions. @jackahl
diff --git a/src/plone/restapi/services/aliases/configure.zcml b/src/plone/restapi/services/aliases/configure.zcml
@@ -8,7 +8,7 @@
       accept="application/json,application/schema+json"
       factory=".get.AliasesGet"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
@@ -17,7 +17,7 @@
       accept="text/csv"
       factory=".get.AliasesGet"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
@@ -26,39 +26,39 @@
       accept="application/json,application/schema+json"
       factory=".get.AliasesGet"
       for="Products.CMFCore.interfaces.IContentish"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="POST"
       factory=".add.AliasesPost"
       for="*"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="POST"
       factory=".add.AliasesRootPost"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
   <plone:service
       method="DELETE"
       factory=".delete.AliasesDelete"
       for="*"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="DELETE"
       factory=".delete.AliasesDelete"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />