OXDEV-8215: Add separate permissions for listing themes and modules

OXID-eSales · Jul 30, 2024 · 3a3a49e · 3a3a49e
1 parent 78fbcd2
commit 3a3a49e
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/src/Module/Controller/ModuleListController.php b/src/Module/Controller/ModuleListController.php
@@ -29,7 +29,7 @@ public function __construct(
      */
     #[Query]
     #[Logged]
-    #[Right('CHANGE_CONFIGURATION')]
+    #[Right('LIST_MODULES')]
     public function modulesList(?ModuleFilters $filters = null): array
     {
         return $this->moduleListService->getModuleList($filters ?? new ModuleFilters());

diff --git a/src/Theme/Controller/ThemeListController.php b/src/Theme/Controller/ThemeListController.php
@@ -30,7 +30,7 @@ public function __construct(
      */
     #[Query]
     #[Logged]
-    #[Right('CHANGE_CONFIGURATION')]
+    #[Right('LIST_THEMES')]
     public function themesList(?ThemeFilters $filters): array
     {
         return $this->themeListService->getThemeList($filters ?? new ThemeFilters());

diff --git a/tests/Unit/Shared/Service/PermissionProviderTest.php b/tests/Unit/Shared/Service/PermissionProviderTest.php
@@ -18,7 +18,9 @@ public function testGetPermissions(): void
     {
         $expectedPermissions = [
             'oxidadmin' => [
-                'CHANGE_CONFIGURATION'
+                'CHANGE_CONFIGURATION',
+                'LIST_THEMES',
+                'LIST_MODULES'
             ],
         ];