Tightened up the default permissions granted to the "Publisher" system role out of the box

(cherry picked from commit 8a785e4393)
This commit is contained in:
Luke Towers 2020-09-11 02:10:59 -06:00
parent fd2d634b5e
commit 78a37298a4
2 changed files with 17 additions and 9 deletions

View File

@ -140,31 +140,34 @@ class ServiceProvider extends ModuleServiceProvider
$manager->registerPermissions('October.Backend', [ $manager->registerPermissions('October.Backend', [
'backend.access_dashboard' => [ 'backend.access_dashboard' => [
'label' => 'system::lang.permissions.view_the_dashboard', 'label' => 'system::lang.permissions.view_the_dashboard',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
], ],
'backend.manage_default_dashboard' => [ 'backend.manage_default_dashboard' => [
'label' => 'system::lang.permissions.manage_default_dashboard', 'label' => 'system::lang.permissions.manage_default_dashboard',
'tab' => 'system::lang.permissions.name', 'tab' => 'system::lang.permissions.name',
'roles' => UserRole::CODE_DEVELOPER,
], ],
'backend.manage_users' => [ 'backend.manage_users' => [
'label' => 'system::lang.permissions.manage_other_administrators', 'label' => 'system::lang.permissions.manage_other_administrators',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
'roles' => UserRole::CODE_DEVELOPER,
], ],
'backend.impersonate_users' => [ 'backend.impersonate_users' => [
'label' => 'system::lang.permissions.impersonate_users', 'label' => 'system::lang.permissions.impersonate_users',
'tab' => 'system::lang.permissions.name', 'tab' => 'system::lang.permissions.name',
'roles' => UserRole::CODE_DEVELOPER,
], ],
'backend.manage_preferences' => [ 'backend.manage_preferences' => [
'label' => 'system::lang.permissions.manage_preferences', 'label' => 'system::lang.permissions.manage_preferences',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
], ],
'backend.manage_editor' => [ 'backend.manage_editor' => [
'label' => 'system::lang.permissions.manage_editor', 'label' => 'system::lang.permissions.manage_editor',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
], ],
'backend.manage_branding' => [ 'backend.manage_branding' => [
'label' => 'system::lang.permissions.manage_branding', 'label' => 'system::lang.permissions.manage_branding',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
], ],
'media.manage_media' => [ 'media.manage_media' => [
'label' => 'backend::lang.permissions.manage_media', 'label' => 'backend::lang.permissions.manage_media',

View File

@ -9,6 +9,7 @@ use Backend;
use Request; use Request;
use BackendMenu; use BackendMenu;
use BackendAuth; use BackendAuth;
use Backend\Models\UserRole;
use Twig\Extension\SandboxExtension; use Twig\Extension\SandboxExtension;
use Twig\Environment as TwigEnvironment; use Twig\Environment as TwigEnvironment;
use System\Classes\MailManager; use System\Classes\MailManager;
@ -417,19 +418,23 @@ class ServiceProvider extends ModuleServiceProvider
$manager->registerPermissions('October.System', [ $manager->registerPermissions('October.System', [
'system.manage_updates' => [ 'system.manage_updates' => [
'label' => 'system::lang.permissions.manage_software_updates', 'label' => 'system::lang.permissions.manage_software_updates',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
'roles' => UserRole::CODE_DEVELOPER,
], ],
'system.access_logs' => [ 'system.access_logs' => [
'label' => 'system::lang.permissions.access_logs', 'label' => 'system::lang.permissions.access_logs',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
'roles' => UserRole::CODE_DEVELOPER,
], ],
'system.manage_mail_settings' => [ 'system.manage_mail_settings' => [
'label' => 'system::lang.permissions.manage_mail_settings', 'label' => 'system::lang.permissions.manage_mail_settings',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
'roles' => UserRole::CODE_DEVELOPER,
], ],
'system.manage_mail_templates' => [ 'system.manage_mail_templates' => [
'label' => 'system::lang.permissions.manage_mail_templates', 'label' => 'system::lang.permissions.manage_mail_templates',
'tab' => 'system::lang.permissions.name' 'tab' => 'system::lang.permissions.name',
'roles' => UserRole::CODE_DEVELOPER,
] ]
]); ]);
}); });