Organizer Entities are visible in views even though the user would not have access to the entity

Created on 16 January 2024, 10 months ago

Problem/Motivation

There is a problem with views and entity permissions that should restrict access. Views will continue to show records, event though a user would not have access to the entity itself.

Steps to reproduce

Create a view of type organizer entities. Select view own organizer as view permission.

You will see all records regardless of your permission.

We implement hook_query_ENTITY_TYPE_access_alter() to fix this.

🐛 Bug report

Status

Active

Version

1.0

Component

Code

Created by

🇬🇧United Kingdom globexplorer

Live updates comments and jobs are added and updated live.

Comments & Activities

Issue created by @globexplorer
Comment 10 months ago →
System Message

globexplorer → committed c3f9de30 on 1.0.x
Issue #3414887 by globexplorer: Organizer Entities are visible in views...

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024