Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
Permission 'access content' is defined in node module that is optional, so system module should not use third party permission in its routing.
Allowing access to machine name translitiration should be controllable/predictable to prevent unauthorized access.
Comments
Comment #11
catchAccess content is defined in system module now for this exact reason.