From 6b1116d397a3256b5974da73f5402fe9afac8d3d Mon Sep 17 00:00:00 2001
From: Sijan Dhungana <sumoseason35@gmail.com>
Date: Wed, 27 May 2026 15:36:34 +0545
Subject: [PATCH] [Fixes #14262] Avoid returning all permissions in dataset
 owner payload (#14263)

(cherry picked from commit e9553e8eb9279bfed92e004069e67ab484c12678)
---
 geonode/security/registry.py | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/geonode/security/registry.py b/geonode/security/registry.py
index a8ee3bc0e96..7a83de590d7 100644
--- a/geonode/security/registry.py
+++ b/geonode/security/registry.py
@@ -433,9 +433,6 @@ def _get_global_perms(self, user):
             if codename in PERMISSIONS:
                 # return constant names defined by GeoNode
                 perms.add(PERMISSIONS[codename])
-            else:
-                # add custom permissions
-                perms.add(codename)
 
         # Create a synthetic permission for adding remote resources
         if user.is_superuser or user.is_staff or getattr(settings, "REGISTERED_USERS_CAN_ADD_REMOTE_RESOURCES", False):