Problem/Motivation

After scan code on 'Drupal 10 upgrade status' see in the issues possible problem with query.

Steps to reproduce

Core 9.4.14 .
Install 'Upgrade status', run checking. See IMCE section.

Proposed resolution

See added patch.
In short, needs add 'accessCheck' into entityQuery query.

Remaining tasks

No changes.

User interface changes

No changes.

API changes

No changes.

Data model changes

No changes.

CommentFileSizeAuthor
imce-missing-explicit-access-check-on-entity-query-fix.patch620 bytesp.kasianov

Comments

t1mm1 created an issue. See original summary.

paulocs’s picture

paulocs
Primary language Portuguese, Brazil
Location Belo Horizonte
commented
Status: Active » Reviewed & tested by the community

Looks good!

  • ufku committed 7f1eba8f on 3.x 
    Issue #3356900 by t1mm1: Missing explicit access check on entity query
ufku’s picture

ufku commented
Status: Reviewed & tested by the community » Fixed
thalles’s picture

thalles
Primary language Portuguese, Brazil
Location Teófilo Otoni - MG
commented

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.