Missing permissions for plugins v3-v4 comparison

System Information
  • Strapi Version: 4.1.11
  • Operating System: macos
  • Database: postgre
  • Node Version: 14.17.6
  • NPM Version: 6.14.15
  • Yarn Version: 1.22.10

I can’t find the documentation on where to set permissions for plugin routes. I also realize this maybe an issue with the plugin developer and not strapi but it does seem odd.

I am using plugin email-designer: strapi-plugin-email-designer - npm

in v3 I was able to expose the routes via roles, e.g. get template (see attached screen shot of v3 to v4 comparison.

Where has this feature gone in v4 / what am I missing?

You must specify the type ‘content-api’ in plugin-name/server/routes/index.js, like this:

module.exports = {
  'content-api': {
    type: 'content-api',
    routes: [
        method: 'POST',
        path: '/some-path',
        handler: 'myController.action',
        config: {
          policies: []

You just saved my life, spent all day trying to figure this out.