Active
Project:
Drupal core
Version:
main
Component:
user.module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
12 Aug 2026 at 06:08 UTC
Updated:
13 Aug 2026 at 21:59 UTC
Jump to comment: Most recent
In #3249027-50: RoleAccessCheck returns Allowed if user has no role larowlan suggested that checking access should only be done by permission, not role. Therefore, deprecate \Drupal\user\Access\RoleAccessCheck should be deprecated.
. We should never be checking access by role, only by permission.
Deprecate RoleAccessCheck
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #4
danielvezaStarted the work for this one, ran into a bit of an issue. The Views Role plugin uses this, and I imagine is pretty actively used. Do we want to also deprecate that, or do we want to bring in a views specific version?