The query access system doesn't replace the node grants system for access not based on properties of the entity itself. Our system has a manager > job > time entry relationship where the manager needs to have access to time entries based on that chain of entity reference fields. We are using adva to provide a node grants analogue for our entities, so we have a table where that relationship is stored. It doesn't seem possible for the conditions provided by the query access system to join to that table, as it is not associated with the entity.
Is there a way to use the conditions to join to a table not associated with the entity? Are there plans to replace the node grants system in entity api?
Thanks for your time.
Comments
Comment #2
bojanz commentedNo, there are no plans to do any of that on my side. If you need node grants, continue using them.
The tradeoff we've made is getting significantly better performance (cause there's no million-row node grant table to rebuild) at the cost of some flexibility (since the majority use case is filtering by entity fields).