Important
As of Drupal 8.2.0, modules no longer require REST-specific permissions. This update begins the transition from a separate permission for API use to relying on the Drupal content authorship permissions. The permission post put delete datasets through the api is deprecated. All API actions now require the same permissions needed to accomplish equivalent things in the Drupal UI. They will, for now, also respect the old "post put..." permission for backward compatibility, but we will remove this in a later release.
Please be advised that you should update the Data node permissions on your data publisher role(s) accordingly.
What's Changed
- Use entity access to negotiate API permissions by @dafeder in #4526
- Add documentation about permissions by @janette in #4537
What's Fixed
- Override file access to allow access to remote files for UploadAndLink by @beeyayjay in #4536