The storage collection page doesn't respect unpublished permissions

Created on 12 October 2023, about 1 year ago

Problem/Motivation

Currently the storage collection page doesn't respect the unpublished permissions.

Steps to reproduce

For example, we can assign to a specific role only the permissions to see all storage of a certain type.
On the listing page, a user with this role will not see unpublished storage of that type created by another user.

In general, however, there are problems on the listing page with all permissions involving unpublished storage.
A user who has permission to see them cannot see them in the listing except in some specific cases.

Proposed resolution

Filters related to unpublished storage are correctly taken into account in the
\Drupal\storage\QueryAccess\StorageQueryAccessHandler::buildConditions method, but the "Published status or admin user" filter added to the "storage" view breaks the existing filters.

We can remove that filter or make the filter not add additional conditions.

🐛 Bug report
Status

Needs review

Version

1.3

Component

Code

Created by

🇮🇹Italy robertom

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024