Enabling module doesn't actually restrict access

Open on Drupal.org →

Created on 29 February 2024, 4 months ago

Updated 4 March 2024, 4 months ago

I enabled the module, and then noticed that all of the checkboxes for a particular bundle's create permission were unchecked (except for Admin).

I created a test user who's not admin, and tried creating the bundle via a node that creates the bundle via Inline Entity Form.

It worked, when I was expecting either:

the entity form not showing up, or
a form validation failure preventing me from submitting the form because of the lack of permission.

Neither happened. The entity was created.

I even tried checking a box for the permission for another role that the test user isn't in, just in case at least one of the boxes has to be checked. This didn't work either. I was still able to create the entity.

Is there something I'm missing in order for the module to take effect?

🐛 Bug report

Status

Postponed: needs info

Version

1.1

Component

Miscellaneous

Created by

🇨🇦Canada colan Toronto 🇨🇦

Live updates comments and jobs are added and updated live.

Sign in to follow issues

Comments & Activities

Issue created by @colan
Comment 4 months ago →
🇨🇦Canada colan Toronto 🇨🇦
Comment 4 months ago →
🇨🇦Canada colan Toronto 🇨🇦
This could be due to 🐛 Field permissions access override Fixed . Needs testing.
Comment 4 months ago →
🇨🇦Canada colan Toronto 🇨🇦
Status changed to Postponed: needs info 4 months ago3:22pm 4 March 2024
Comment 4 months ago →
🇧🇪Belgium DieterHolvoet Brussels
This might be an Inline Entity Form issue. What happens when you visit the add form for that entity type (/admin/content/<entityType>/add/<bundle>)? Is that page accessible? I just tested with those pages and that seems to work. This module is implemented with default entity access checks, so if this works on the default entity add routes and not when using Inline Entity Form, the issue probably lies with that module.

contrib.social Blog FAQ Discussions

Production build 0.69.0 2024