When I have a view with a field that shows all the operations of the listed entities, then the "Clone" operation is displayed as well, which is great. However, that operation is also displayed for users that don't have the permission to clone entities. So there might be a permission check missing.

Comments

jurgenhaas created an issue. See original summary.

colan’s picture

colan
he/him
Primary language English
Location Toronto 🇨🇦
commented
Status: Active » Closed (duplicate)

Marking this one as the duplicate (even though it's older) as #2903179: Adding access validation on hook_entity_operation has a patch.