Ajax 403 error on autocomplete fields with new nodes

Hi Sill, it looks like the issue is a case sensitivity one. On line 1025 of entityreference.module
if ($entity_id !== 'NULL') {
when a new node is being used, $entity_id = 'null' so this condition becomes true when really it should be false.

Any idea if fixing the case on this condition will have effects elsewhere?

Did anyone ever solve this issue?

This is happening to me when Entity Reference in paragraphs. When I initially add a new paragraph, I can add references, as many as I want. As soon as I save the content, I get this error when I update. Both $has_view_access and $has_update_access are returning false. The difference is that $entity_id is not being set on the initial add paragraph, and it is being set when editing an existing item. $entity_type = 'paragraphs_item' and $entity_id is a paragraph item id. This doesn't seem right to me. I can avoid this by changing line 1025 to if ($entity_id !== 'NULL' || $entity_type !== 'paragraphs_item') {

Thank you.

My use case is slightly different. I have a node that has a Paragraph field on it. I add a Paragraph Bundle that has an entity reference field. When I create the node, no problems. But this is a multilingual site and so when I translate the node into French and then start typing the name of a French node, I get the 403 error being discussed above.

Removing return menu_access_denied; on line 1030 of entityreference.module removed the AJAX error for me. Seems like this might not be the most sustainable / safe thing to do.

This isn't much better, but you can accomplish something similar by changing lines 1027 and 1028 to:

$has_view_access = ($entity_type == 'paragraphs_item' ? TRUE : (entity_access('view', $entity_type, $entity) !== FALSE));
$has_update_access = ($entity_type == 'paragraphs_item' ? TRUE : (entity_access('update', $entity_type, $entity) !== FALSE));

The proposed fixes in #1 and #3 to line 1025 didn't seem to work for me.

To update this ongoing issue, a little more context, my entity ref field is in a paragraph within a paragraph. Not sure this is relevant. #5 works and it is now 1083 and 1084.

I'm having a similar problem. I have an entityreference autocomplete field when adding an image (in the media browser) to a paragraph field. The same field on the node itself works fine for all users, but the one in the paragraph/media browser gives a 403 AJAX error to authenticated users.

Removing return menu_access_denied; on line 1088 of entityreference.module removed the AJAX error, but as noted that's a bad idea.

None of the other solutions put forward on this page worked for me either.

I was facing a similar behaviour as described in #3 @KaseyMK maybe it is similiar to yours. Have you tried to enable the paragraphs_bundle_permissions module, which comes inside paragraphs module?

I solved in this way.

#8 seemed to fix this issue for my site. Thanks joanpebupe!

#8 works for me. Its just strange it was not a problem until recently.

The problem occurred for me when I was trying to use an entity reference on a draft page.
In theory #8 worked for me too but instead of using the module I copied the paragraphs_bundle_permissions_paragraphs_item_access hook and put it in my own custom module with a couple of simple rules because I just have so many bundles on the site the permissions would of been a nightmare.

Weirdly, this problem had gone away for me and just came back... but the solution in #8 worked for me too. Thanks @joanpebupe