We need to make sure that people can only see those groups they have access to view (or update/delete) when generating a list of groups such as the one found at /admin/group.

Solution: Write an entity query access handler (Entity API) for Group entities.

CommentFileSizeAuthor
#2 group-3035067-2.patch14.08 KBkristiaanvandeneynde

Comments

kristiaanvandeneynde created an issue. See original summary.

kristiaanvandeneynde’s picture

kristiaanvandeneynde
Primary language Dutch
Location Antwerp, Belgium
commented
Status: Active » Needs review
StatusFileSize
new group-3035067-2.patch14.08 KB

Note: Adds a dependency on Entity API.

kristiaanvandeneynde’s picture

kristiaanvandeneynde
Primary language Dutch
Location Antwerp, Belgium
commented
Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

rjg’s picture

rjg commented

Since this change added a new module dependency on entity, thoughts on a groupupdate hook to install it? (\Drupal::service('module_installer')->install(['entity']);)

kristiaanvandeneynde’s picture

kristiaanvandeneynde
Primary language Dutch
Location Antwerp, Belgium
commented

Nah, it was clearly documented in the release notes.