Missing menu_link_content entity access checks on link routes

Created on 6 May 2024, 7 months ago

Problem/Motivation

The link entity CRUD routes provided by GroupContentMenuRouteProvider do no check entity access.

I'm specifically referring to:

  • getAddMenuLink
  • getDeleteMenuLink
  • getEditMenuLink

Steps to reproduce

Proposed resolution

Add an additional to the routes.

Remaining tasks

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Active

Version

3.0

Component

Code

Created by

🇸🇮Slovenia alecsmrekar

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024