We have a node that is unpublished in the source language but one of its translations is published.
When accessing one of the relationships of the translation via the JSON API without being logged, we get this error:
The current user is not allowed to view this relationship.
This seems to happen because RelationshipRouteAccessCheck::access() calls checkEntityAccess() with the source entity and not the translation.
RelationshipRouteAccessCheck::access() should fetch the translationin the current language if available.
Needs work
9.5
Last updated
The change is currently missing an automated test that fails when run with the original code, and succeeds when the bug has been fixed.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
I can't reproduce this anymore on Drupal 11.0.6, it looks like the $entity in RelationshipRouteAccessCheck::access() is now always in the correct language.