AC-1316 Magento 2 Integration Resources Aren't Respected

Author: mahesh-singh-rajawat

app/code/Magento/Catalog/etc/acl.xml

@@ -12,7 +12,6 @@
                 <resource id="Magento_Catalog::catalog" title="Catalog" translate="title" sortOrder="30">
                     <resource id="Magento_Catalog::catalog_inventory" title="Inventory" translate="title" sortOrder="10">
                         <resource id="Magento_Catalog::products" title="Products" translate="title" sortOrder="10">
-                            <resource id="Magento_Catalog::update_attributes" title="Update Attributes" translate="title" sortOrder="10" />
                             <resource id="Magento_Catalog::edit_product_design" title="Edit Product Design" translate="title" sortOrder="20" />
                         </resource>
                         <resource id="Magento_Catalog::categories" title="Categories" translate="title" sortOrder="20">
@@ -27,7 +26,9 @@
                         </resource>
                     </resource>
                     <resource id="Magento_Backend::stores_attributes">
-                        <resource id="Magento_Catalog::attributes_attributes" title="Product" translate="title" sortOrder="30" />
+                        <resource id="Magento_Catalog::attributes_attributes" title="Product" translate="title" sortOrder="30">
+                            <resource id="Magento_Catalog::update_attributes" title="Update Attributes" translate="title" sortOrder="10" />
+                        </resource>
                         <resource id="Magento_Catalog::sets" title="Attribute Set" translate="title" sortOrder="40"/>
                     </resource>
                 </resource>

app/code/Magento/Catalog/etc/webapi.xml

@@ -84,7 +84,7 @@
     <route url="/V1/products/attributes/:attributeCode" method="PUT">
         <service class="Magento\Catalog\Api\ProductAttributeRepositoryInterface" method="save"/>
         <resources>
-            <resource ref="Magento_Catalog::attributes_attributes" />
+            <resource ref="Magento_Catalog::update_attributes" />
         </resources>
     </route>
     <route url="/V1/products/attributes/:attributeCode" method="DELETE">