As detailed in https://doc.nuxeo.com/nxdoc/publishing-content/, a user who wants to publish a document in a section should have the following permissions:
- At least "Edit" on the workspace from which you want to publish
- At least "Read" and "Can ask for publishing" on the section into which you want to publish the document (Read permission is usually inherited from the user’s group permissions).
This is not the current behaviour: users should have Edit permission on the target section. If a user has only Read and Can Ask For Publishing, it gives a permission error. Checking the code, it really looks like we are not checking the good permissions:
This bug is also referenced in https://answers.nuxeo.com/general/q/86d2b333733a4533b46bbeb38d92c506/Permissions-needed-for-Publishing-in-section