Merge branch 'main' into instancebehavior

plone · Oct 17, 2024 · 37fc173 · 37fc173
2 parents 59de4a4 + b9a56e1
commit 37fc173
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 7 deletions.
diff --git a/news/1820.bugfix b/news/1820.bugfix
@@ -0,0 +1 @@
+Aliases endpoint: Use "Manage Portal Aliases" and "Manage Content Aliases" permissions. @jackahl
diff --git a/src/plone/restapi/services/aliases/configure.zcml b/src/plone/restapi/services/aliases/configure.zcml
@@ -8,7 +8,7 @@
       accept="application/json,application/schema+json"
       factory=".get.AliasesGet"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
@@ -17,7 +17,7 @@
       accept="text/csv"
       factory=".get.AliasesGet"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
@@ -26,39 +26,39 @@
       accept="application/json,application/schema+json"
       factory=".get.AliasesGet"
       for="Products.CMFCore.interfaces.IContentish"
-      permission="zope2.View"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="POST"
       factory=".add.AliasesPost"
       for="*"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="POST"
       factory=".add.AliasesRootPost"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />
 
   <plone:service
       method="DELETE"
       factory=".delete.AliasesDelete"
       for="*"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManageContextAliases"
       name="@aliases"
       />
 
   <plone:service
       method="DELETE"
       factory=".delete.AliasesDelete"
       for="Products.CMFPlone.interfaces.IPloneSiteRoot"
-      permission="cmf.ModifyPortalContent"
+      permission="Products.CMFPlone.ManagePortalAliases"
       name="@aliases"
       />