The permissions 'export configuration' and 'import configuration' are used in config.routing.yml but they are not implemented using hook_permission().

The only permission defined in config.module currently is 'synchronize configuration'. However, in the yml file config.routing.yml these 3 permissions are used:
'synchronize configuration'
'export configuration'
'import configuration'

The 'export configuration' permission is used for following callbacks:
admin/config/development/export
admin/config/development/export-download

The 'import configuration' permission is used for following callback:
admin/config/development/import

I think we should either:
1) add the 'export configuration' and 'import configuration' permissions to config.module, or
2) use the 'synchronize configuration' permission for both export and import menu callbacks (change in config.routing.yml)

Files: 
CommentFileSizeAuthor
#1 drupal-add-permissions-export-import-configuration-2017859-1.patch618 bytesvaldo
PASSED: [[SimpleTest]]: [MySQL] 57,953 pass(es).
[ View ]

Comments

Status:Active» Needs review
StatusFileSize
new618 bytes
PASSED: [[SimpleTest]]: [MySQL] 57,953 pass(es).
[ View ]

Patch for option 1 (add the permissions) is attached.

Status:Needs review» Reviewed & tested by the community

Yeah, clear signs of missing tests. Anyway, a test that uses this permission is being added in #2017019: Configuration export action path is broken when Drupal is installed in a subfolder so it's probably ok to get this one in before.

Status:Reviewed & tested by the community» Fixed

Nice find and I'm looking forward to the test in #2017019: Configuration export action path is broken when Drupal is installed in a subfolder :)

Committed d888189 and pushed to 8.x. Thanks!

Automatically closed -- issue fixed for 2 weeks with no activity.