Problem/Motivation

https://www.drupal.org/project/drupal/issues/2991698#comment-14009628

In SalesforceMfwAccessCheck, the default case is return AccessResult::neutral(). Due to an inconsistency between routes and entities, routes must be ::allowed(), whereas entities must be ::neutral(). This is causing unrelated blocks to be 403 forbidden when trying to remove them from the block layout.

Proposed resolution

Update the AccessCheck default case to ::allowed().
Provide automated test for this case.

Issue fork salesforce_mfw-3465064

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

kjl16 created an issue. See original summary.

kjl16 opened merge request !5

luke.leber’s picture

luke.leber
Primary language English
Location Pennsylvania
commented
Status: Active » Reviewed & tested by the community

Ship it.

  • kjl16 committed ddec6911 on 1.0.x 
    Issue #3465064: AccessCheck for routes have to be allowed
kyleleber’s picture

kyleleber commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.