diff --git a/core/modules/node/node.module b/core/modules/node/node.module index 4ab129f..541b7ce 100644 --- a/core/modules/node/node.module +++ b/core/modules/node/node.module @@ -890,17 +890,12 @@ function node_form_system_themes_admin_form_submit($form, FormStateInterface $fo * the process above is followed except that hook_node_access() is not called on * each node for performance reasons and for proper functioning of the pager * system. See the @link entity_api Entity API topic @endlink for more - * information on entity queries.To have your query only retrieve nodes which - * the user has access to: - * - Use SelectQuery::addTag() to add the 'node_access' tag to the query. This - * will make sure that your base query does not allow for the display of - * unpublished nodes to users who should not have access to the node. Adding a - * tag of "node_access" to a db_select() query restricts node access through - * the use of hook_query_TAG_alter(). - * - Add conditions to check the published status of the node. Tagging a query - * with "node_access" does not automatically check the published/unpublished - * status of nodes, so your base query is responsible for ensuring that - * unpublished nodes are not displayed to inappropriate users. + * information on entity queries. This will make sure that your base query does + * not allow for the display of unpublished nodes to users who should not have + * access to the node. Conditions need to be added to check the published status + * of the node. Tagging a query with "node_access" does not automatically check + * the published/unpublished status of nodes, so your base query is responsible + * for ensuring that unpublished nodes are not displayed to inappropriate users. * * Note: Even a single module returning an AccessResultInterface object from * hook_node_access() whose isForbidden() method equals TRUE will block access