I'm pretty sure that in #3328351: Explicit access checks on content entity queries → , we went a bit to far. We need to back out the accessCheck on the membership loader. Patch attached. Not sure how to add test coverage for this, but it should be added.
Needs work
3.0
Code
The change is currently missing an automated test that fails when run with the original code, and succeeds when the bug has been fixed.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.