Contrib.social

D10 compatibility - query access check

Open on Drupal.org →
Created on 9 December 2022, almost 2 years ago
Updated 24 March 2023, over 1 year ago

Problem/Motivation

Entity queries must explicitly set whether the query should be access checked or not. See Drupal\Core\Entity\Query\QueryInterface::accessCheck().

Steps to reproduce

Use the 2.0.0 version of the module with Drupal 10. Go to any FO page (node or other content).

Proposed resolution

Add $query->accessCheck() in \Drupal\orejime\Services\OrejimeManager::getAllServices().
Add $query->accessCheck() in \Drupal\orejime\Form\OrejimeForm::nameAlreadyUsed().

🐛 Bug report
Status

Fixed

Version

2.0

Component

Code

Created by

🇫🇷France MBidinger

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Comment almost 2 years ago →
    🇧🇪Belgium davidiio

    Sorry for re-opening this issue but I think an ->accessCheck() is still missing in /src/Form/OrejimeSettingsForm.php, around line 387.
    It prevents from opening de module configuration page.

  • Comment almost 2 years ago →
    🇫🇷France Fabsgugu

    Thanks,
    I corrected.

  • Comment over 1 year ago →
    🇫🇷France jlarvers

    Same problem with D 10.0.5 with version 2.0.0. No access to Drupal after module activation. Unable to remove module next: orejime: There is content for entity type: Orejime. <a href="/admin/modules/uninstall/entity/orejime_service">Remove orejime Entities</a>.
    It's good with version 2.0.x-dev

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024