The permissions 'export configuration' and 'import configuration' are used in config.routing.yml but they are not implemented using hook_permission().
The only permission defined in config.module currently is 'synchronize configuration'. However, in the yml file config.routing.yml these 3 permissions are used:'synchronize configuration''export configuration''import configuration'
The 'export configuration' permission is used for following callbacks:admin/config/development/exportadmin/config/development/export-download
The 'import configuration' permission is used for following callback:admin/config/development/import
I think we should either:
1) add the 'export configuration' and 'import configuration' permissions to config.module, or
2) use the 'synchronize configuration' permission for both export and import menu callbacks (change in config.routing.yml)