Missing menu_link_content entity access checks on link routes

Open on Drupal.org →

Created on 6 May 2024, about 2 months ago

Problem/Motivation

The link entity CRUD routes provided by GroupContentMenuRouteProvider do no check entity access.

I'm specifically referring to:

getAddMenuLink
getDeleteMenuLink
getEditMenuLink

Steps to reproduce

Proposed resolution

Add an additional to the routes.

Remaining tasks

User interface changes

API changes

Data model changes

🐛 Bug report

Status

Needs review

Version

3.0

Component

Code

Created by

🇸🇮Slovenia alecsmrekar

Live updates comments and jobs are added and updated live.

Sign in to follow issues

Merge Requests

!21Missing menu_link_content entity access checks on link routes
Open
🇸🇮Slovenia alecsmrekar
updated about 2 months ago

Comments & Activities

Issue created by @alecsmrekar
Merge request !21Issue 3445462: Add link entity access checks → (Open) created by alecsmrekar
Open in Jenkins → Open on Drupal.org →
Core: 10.2.x + Environment: PHP 8.1 & MySQL 8
last update about 2 months ago
2 fail
Issue was unassigned.
Status changed to Needs review about 2 months ago12:56pm 6 May 2024
Comment about 2 months ago →
🇸🇮Slovenia alecsmrekar
Open in Jenkins → Open on Drupal.org →
Core: 10.2.x + Environment: PHP 8.1 & MySQL 8
last update about 2 months ago
6 pass

contrib.social Blog FAQ Discussions

Production build 0.69.0 2024