Add explicit accessCheck(TRUE/FALSE) to content entity queries

Created on 10 April 2022, about 2 years ago

Updated 2 March 2023, over 1 year ago

Access checking must be explicitly specified on content entity queries since 9.2.
Change record: https://www.drupal.org/node/3201242 →

Add accessCheck() to all entity queries.

📌 Task

Status

Fixed

Version

1.0

Component

Core

Created by

🇸🇪Sweden marcusml

Live updates comments and jobs are added and updated live.

Incomplete comments

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Comment over 1 year ago →
🇫🇮Finland mErilainen
The upgrade status module is still complaining about this in some places, but not all. A bug in https://www.drupal.org/project/upgrade_status → perhaps?
Comment 12 months ago →
🇪🇸Spain google01
In the latest versions, functions continue to appear in the code without explicit accessCheck(TRUE/FALSE) to content entity queries.

For example in the function "tmgmt_entity_delete" in the code file "tmgmt.module". This case is really worrying because it causes errors in the removal of any content, leaving Drupal 10 websites completely inoperative.

Production build 0.69.0 2024