Loosen up policies so editors can get what they need
This commit is contained in:
@@ -18,7 +18,6 @@ namespace Umbraco.Cms.Web.BackOffice.Controllers;
|
||||
/// Backoffice controller supporting the dashboard for language administration.
|
||||
/// </summary>
|
||||
[PluginController(Constants.Web.Mvc.BackOfficeApiArea)]
|
||||
[Authorize(Policy = AuthorizationPolicies.SectionAccessSettings)]
|
||||
public class LanguageController : UmbracoAuthorizedJsonController
|
||||
{
|
||||
private readonly ILocalizationService _localizationService;
|
||||
@@ -36,7 +35,7 @@ public class LanguageController : UmbracoAuthorizedJsonController
|
||||
/// </summary>
|
||||
/// <returns></returns>
|
||||
[HttpGet]
|
||||
public IDictionary<string, string> GetAllCultures()
|
||||
[Authorize(Policy = AuthorizationPolicies.TreeAccessLanguages)]public IDictionary<string, string> GetAllCultures()
|
||||
=> CultureInfo.GetCultures(CultureTypes.AllCultures).DistinctBy(x => x.Name).OrderBy(x => x.EnglishName).ToDictionary(x => x.Name, x => x.EnglishName);
|
||||
|
||||
/// <summary>
|
||||
@@ -44,6 +43,7 @@ public class LanguageController : UmbracoAuthorizedJsonController
|
||||
/// </summary>
|
||||
/// <returns></returns>
|
||||
[HttpGet]
|
||||
[Authorize(Policy = AuthorizationPolicies.SectionAccessContent)]
|
||||
public IEnumerable<Language>? GetAllLanguages()
|
||||
{
|
||||
IEnumerable<ILanguage> allLanguages = _localizationService.GetAllLanguages();
|
||||
@@ -52,6 +52,7 @@ public class LanguageController : UmbracoAuthorizedJsonController
|
||||
}
|
||||
|
||||
[HttpGet]
|
||||
[Authorize(Policy = AuthorizationPolicies.TreeAccessLanguages)]
|
||||
public ActionResult<Language?> GetLanguage(int id)
|
||||
{
|
||||
ILanguage? lang = _localizationService.GetLanguageById(id);
|
||||
|
||||
@@ -14,7 +14,7 @@ namespace Umbraco.Cms.Web.BackOffice.Controllers;
|
||||
/// The API controller used for retrieving available stylesheets
|
||||
/// </summary>
|
||||
[PluginController(Constants.Web.Mvc.BackOfficeApiArea)]
|
||||
[Authorize(Policy = AuthorizationPolicies.SectionAccessSettings)]
|
||||
[Authorize(Policy = AuthorizationPolicies.SectionAccessContent)]
|
||||
public class StylesheetController : UmbracoAuthorizedJsonController
|
||||
{
|
||||
private readonly IFileService _fileService;
|
||||
|
||||
Reference in New Issue
Block a user