Problem/Motivation

The entity query in wse_entity_view is missing a call to accessCheck() and that throws fatal errors in D10.1 which are related to the enforcement of that access check since https://www.drupal.org/node/3201242

Steps to reproduce

On Drupal 10.1, view a content of a type on which the display of the entity_workspace_status extra field is enabled. The field is only available if the corresponding setting entity_workspace_status is enabled for that content type via the WSE settings form.

Proposed resolution

Add the access check to the entity query.

Issue fork wse-3408642

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

s_leu created an issue. See original summary.

s_leu’s picture

s_leu commented
Issue summary: View changes

s_leu opened merge request !53

s_leu’s picture

s_leu commented
Status: Active » Needs review

  • s_leu committed c73d8f2f on 1.0.x 
    Issue #3408642: Added missing access check in entity query inside...
amateescu’s picture

amateescu commented
Status: Needs review » Fixed

Merged into 1.0.x, thanks!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.