From 99b27a27a34619adb820b91da7fa0c0da7572105 Mon Sep 17 00:00:00 2001
From: Vincenzo Scamporlino <vincenzos@spotify.com>
Date: Thu, 13 Nov 2025 20:30:27 +0100
Subject: [PATCH 1/2] catalog-import: authorize catalog.entity.create
 permission in page extension

Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
---
 plugins/catalog-import/package.json  | 1 +
 plugins/catalog-import/src/alpha.tsx | 8 +++++++-
 yarn.lock                            | 1 +
 3 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/plugins/catalog-import/package.json b/plugins/catalog-import/package.json
index e3a646d895..cffe9a230d 100644
--- a/plugins/catalog-import/package.json
+++ b/plugins/catalog-import/package.json
@@ -66,6 +66,7 @@
     "@backstage/integration-react": "workspace:^",
     "@backstage/plugin-catalog-common": "workspace:^",
     "@backstage/plugin-catalog-react": "workspace:^",
+    "@backstage/plugin-permission-react": "workspace:^",
     "@material-ui/core": "^4.12.2",
     "@material-ui/icons": "^4.9.1",
     "@material-ui/lab": "4.0.0-alpha.61",
diff --git a/plugins/catalog-import/src/alpha.tsx b/plugins/catalog-import/src/alpha.tsx
index ab9d06ef19..2d9e5deaba 100644
--- a/plugins/catalog-import/src/alpha.tsx
+++ b/plugins/catalog-import/src/alpha.tsx
@@ -35,6 +35,8 @@ import {
 import { CatalogImportClient, catalogImportApiRef } from './api';
 import { rootRouteRef } from './plugin';
 import { catalogApiRef } from '@backstage/plugin-catalog-react';
+import { RequirePermission } from '@backstage/plugin-permission-react';
+import { catalogEntityCreatePermission } from '@backstage/plugin-catalog-common/alpha';
 
 export * from './translation';
 
@@ -46,7 +48,11 @@ const catalogImportPage = PageBlueprint.make({
     routeRef: convertLegacyRouteRef(rootRouteRef),
     loader: () =>
       import('./components/ImportPage').then(m =>
-        compatWrapper(<m.ImportPage />),
+        compatWrapper(
+          <RequirePermission permission={catalogEntityCreatePermission}>
+            <m.ImportPage />
+          </RequirePermission>,
+        ),
       ),
   },
 });
diff --git a/yarn.lock b/yarn.lock
index 6fef5116f5..ac9aa1aec5 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5253,6 +5253,7 @@ __metadata:
     "@backstage/plugin-catalog": "workspace:^"
     "@backstage/plugin-catalog-common": "workspace:^"
     "@backstage/plugin-catalog-react": "workspace:^"
+    "@backstage/plugin-permission-react": "workspace:^"
     "@backstage/test-utils": "workspace:^"
     "@material-ui/core": "npm:^4.12.2"
     "@material-ui/icons": "npm:^4.9.1"

From f987bfda6d2abaae46e402dc78467541d9d7ed16 Mon Sep 17 00:00:00 2001
From: Vincenzo Scamporlino <vincenzos@spotify.com>
Date: Thu, 13 Nov 2025 20:33:08 +0100
Subject: [PATCH 2/2] catalog-import: changeset

Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
---
 .changeset/tidy-lines-hear.md | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 .changeset/tidy-lines-hear.md

diff --git a/.changeset/tidy-lines-hear.md b/.changeset/tidy-lines-hear.md
new file mode 100644
index 0000000000..4cb28dfbac
--- /dev/null
+++ b/.changeset/tidy-lines-hear.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-import': patch
+---
+
+Fixed missing `catalog.entity.create` permission authorization in the default page extension.