When introducing a "Execute arbitrary PHP script" action, the description line explicitly states :

Note that it is up to the script to save the $entity once it\'s done modifying it.

So it may be expected that the module does not save the entity...
But it does, (see related issue) which can give unexpected results, particularly if the script deletes the entity : the entity_save() then goes wild, more so if there are sophisticated hook_entity_save() attached...

There are a couple of open issues dealing with this "changes_properties" behavior being default, but I think "Execute arbitrary PHP script" should be handled separately

Comments

gifad created an issue. See original summary.

gifad’s picture

Status: Active » Needs review
StatusFileSize
new501 bytes

The attached patch provides an "arbitrary behavior" to this action, which prevents automatic save, in line whith the action description.

gifad’s picture

StatusFileSize
new1.04 KB

In reply to Remove "Execute arbitrary PHP script" action, ensure strict permission have been explicitly granted by Actions Permissions module...