Levers the owner routes and KV may write but Drupal's own settings form may not.
A site administrator is one tenant's administrator, and a policy that limits what a compromised
administrator session can load should not be one form submission from off.
Levers the owner routes and KV may write but Drupal's own settings form may not. A site administrator is one tenant's administrator, and a policy that limits what a compromised administrator session can load should not be one form submission from off.