- Issue created by @msnassar
Field visibility access is not applied correctly due to caching.
See also the attached failing (quickly implemented) test to demonstrate the issue.
Could be solved by applying the patch in 🐛 Cache metadata by plugins is discarded Needs review and do the necessary changes to user_fields_visibility field permission type plugin.
Active
1.0
Code
It is used for security vulnerabilities which do not need a security advisory. For example, security issues in projects which do not have security advisory coverage, or forward-porting a change already disclosed in a security advisory. See Drupal’s security advisory policy for details. Be careful publicly disclosing security vulnerabilities! Use the “Report a security vulnerability” link in the project page’s sidebar. See how to report a security issue for details.