- Issue created by @robertom
- Status changed to Needs review
about 1 year ago 3:56pm 12 October 2023
Currently the storage collection page doesn't respect the unpublished permissions.
For example, we can assign to a specific role only the permissions to see all storage of a certain type.
On the listing page, a user with this role will not see unpublished storage of that type created by another user.
In general, however, there are problems on the listing page with all permissions involving unpublished storage.
A user who has permission to see them cannot see them in the listing except in some specific cases.
Filters related to unpublished storage are correctly taken into account in the
\Drupal\storage\QueryAccess\StorageQueryAccessHandler::buildConditions method, but the "Published status or admin user" filter added to the "storage" view breaks the existing filters.
We can remove that filter or make the filter not add additional conditions.
Needs review
1.3
Code