Custom publishing option fields inside an inline entity form do not have their field access enforced.
Configure an entity to have an entity reference field to content with custom publish options and set the form widget to one provided by the inline_entity_form module. Log in as a user who does not have access to set custom publish options. From the entity's form, note the inline entity form shows the custom publish option fields even though the user should not have permission.
Implement hook_inline_entity_form_entity_form_alter() to mirror access control provided in custom_pub_form_node_form_alter().
Needs review
1.0
Code
greenSkin → changed the visibility of the branch 3415622-access-control-isnt to hidden.