An attached display link should not be shown when the user has no access to that attached display.
This is true when the access is restricted in the view display's access settings.
However, when the access is restricted via a validation criteria in a contextual filter, the attached display link is still shown. When clicking on the link, the user will see a 404 page.
I did the following in a fresh standard install of Drupal 11.
{% if feed_icons %}
<div class="feed-icons">
{{ feed_icons }}
</div>
{% endif %}
The link to an inaccessible page should not be shown.
In "\Drupal\views\ViewExecutable::attachDisplays()" there is a check if the display can be accessed:
if ($display_handler->isEnabled() && $display_handler->access()) {...}
Either $display_handler->access() should return false or we need to add another check.
Investigate and fix.
N/A
N/A
N/A
Issue description.
Active
11.0 🔥
Last updated
Didn't try, but even if we would fix the access check we would then probably run into caching issues, since the validation cache contexts wouldn't bubble currently due to #3091671: Validate user has access option in contextual filter does not bubble access cacheability for views page →