Merge pull request #18441 from eileenmcnaughton/5.29

APIv4 - Map specific action names to more generic versions
civicrm · Sep 12, 2020 · c78bd17 · c78bd17
2 parents f4570b6 + d018779
commit c78bd17
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/Civi/Api4/Generic/AbstractAction.php b/Civi/Api4/Generic/AbstractAction.php
@@ -407,13 +407,15 @@ public function getPermissions() {
       'default' => ['administer CiviCRM'],
     ];
     $action = $this->getActionName();
-    if (isset($permissions[$action])) {
-      return $permissions[$action];
-    }
-    elseif (in_array($action, ['getActions', 'getFields'])) {
-      return $permissions['meta'];
-    }
-    return $permissions['default'];
+    // Map specific action names to more generic versions
+    $map = [
+      'getActions' => 'meta',
+      'getFields' => 'meta',
+      'replace' => 'delete',
+      'save' => 'create',
+    ];
+    $generic = $map[$action] ?? 'default';
+    return $permissions[$action] ?? $permissions[$generic] ?? $permissions['default'];
   }
 
   /**