The nightmare of permissions and OAuth scopes in Drupal #drupal #api https://mglaman.dev/blog/nightmare-permissions-and-oauth-scopes-drupal?utm_campaign=blog&utm_source=fediverse&utm_medium=social&utm_content=toot

[mglaman@phpc.social]

The nightmare of permissions and OAuth scopes in Drupal #drupal #api https://mglaman.dev/blog/nightmare-permissions-and-oauth-scopes-drupal?utm_campaign=blog&utm_source=fediverse&utm_medium=social&utm_content=toot

[berdir@drupal.community]

@mglaman Acktuallly... only bypass node access is the super permission. It was split off from the administer permission which only handles some weird leftovers like access to status and promote fields

[berdir@drupal.community]

@mglaman see https://www.drupal.org/project/drupal/issues/3552027