Problem/Motivation

After importing the feed, Imported list showing less rows or blank for non admin for unpublished nodes for non admin user roles

Steps to reproduce

  • Login as non admin user who have permission of Administrator Feed
  • Create a feed
  • import feed data with unpublished node
  • Once import process completed, go to "Items" tab
  • User will see less rows or blank, though he/she has "view own unpublished content"

Proposed resolution

Currently all queries having check access : https://www.drupal.org/node/3157393
So, with entity query need to set ->accessCheck(FALSE) to view all items in the list.
Attaching the patch here with

CommentFileSizeAuthor
feeds_import_list_access_fix.patch549 bytesonly4kaustav

Comments

only4kaustav created an issue. See original summary.

megachriz’s picture

I think that the current behaviour is correct. Else it would be a security issue if someone is able to view content that he/she doesn't have access to. Or is content that the current logged in user owns also not shown?

megachriz’s picture

Note: in #3287478: Automated Drupal 10 compatibility fixes I explicitly added accessCheck(TRUE) In ItemListController.

only4kaustav’s picture

Hi @MegaChriz,

These contents those the current logged in user owns also not shown if those are unpublished.
As I said, the permission of "view own unpublished content" also enabled for this user role.

Thanks