When new label elements are created for the sticky actions menu, the `#access` key is not considered, resulting in menu items appearing that should not be.
Marked as critical as it can display elements to editor that they should not be able to see. Drupal permissions generally still block the action.
Ensure `#access` is included in $new_label array.
N/A
N/A
N/A
Active
3.0
Code
It is used for security vulnerabilities which do not need a security advisory. For example, security issues in projects which do not have security advisory coverage, or forward-porting a change already disclosed in a security advisory. See Drupal’s security advisory policy for details. Be careful publicly disclosing security vulnerabilities! Use the “Report a security vulnerability” link in the project page’s sidebar. See how to report a security issue for details.
Thanks for the work on this! I was having the exact same issue with the Preview button showing even though it was disabled in the content type settings. Your change adding the #access fixes the issue