Problem/Motivation

When entities are pre-resolved in the entity_reference_revisions data producer, there is an access check missing.

Proposed resolution

Check the access.

Issue fork graphql-3586684

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

chr.fritsch created an issue. See original summary.

chr.fritsch opened merge request !82

chr.fritsch’s picture

chr.fritsch
he/him
Primary language German
Location 🇩🇪🇪🇺🌍
commented
Status: Active » Needs review

Here is a fix.

Disclaimer: The test was created with the help of Copilot.

  • klausi committed d8fd8854 on 5.x authored by chr.fritsch 
    fix(entity_reference_revisions): Add missing entity access check (#...
klausi’s picture

klausi
he/him||they/them
Primary language German
Location 🇦🇹 Vienna
commented
Status: Needs review » Fixed

Merged, thanks!

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.