diff --git a/core/modules/node/lib/Drupal/node/Form/DeleteMultiple.php b/core/modules/node/lib/Drupal/node/Form/DeleteMultiple.php index 09ad79c..c1f83de 100644 --- a/core/modules/node/lib/Drupal/node/Form/DeleteMultiple.php +++ b/core/modules/node/lib/Drupal/node/Form/DeleteMultiple.php @@ -24,7 +24,7 @@ class DeleteMultiple extends ConfirmFormBase implements ContainerInjectionInterf /** * The array of nodes to delete. * - * @var array + * @var \Drupal\node\NodeInterface[] */ protected $nodes = array(); @@ -101,11 +101,19 @@ public function buildForm(array $form, array &$form_state) { return new RedirectResponse(url('admin/content', array('absolute' => TRUE))); } + $items = array(); + foreach ($this->nodes as $nid => $node) { + if (!$node->access('delete')) { + unset($this->nodes[$nid]); + continue; + } + + $items[$nid] = String::checkPlain($node->label()); + } + $form['nodes'] = array( '#theme' => 'item_list', - '#items' => array_map(function ($node) { - return String::checkPlain($node->label()); - }, $this->nodes), + '#items' => $items, ); $form = parent::buildForm($form, $form_state); diff --git a/core/modules/user/lib/Drupal/user/Form/UserMultipleCancelConfirm.php b/core/modules/user/lib/Drupal/user/Form/UserMultipleCancelConfirm.php index ba85502..d374d5c 100644 --- a/core/modules/user/lib/Drupal/user/Form/UserMultipleCancelConfirm.php +++ b/core/modules/user/lib/Drupal/user/Form/UserMultipleCancelConfirm.php @@ -113,6 +113,7 @@ public function getConfirmText() { */ public function buildForm(array $form, array &$form_state) { // Retrieve the accounts to be canceled from the temp store. + /** @var $accounts \Drupal\user\UserInterface[] */ $accounts = $this->tempStoreFactory ->get('user_user_operations_cancel') ->get($this->currentUser()->id()); @@ -122,8 +123,8 @@ public function buildForm(array $form, array &$form_state) { $form['accounts'] = array('#prefix' => '