Add ability to skip access check for rendering an entity in the Entity display plugin

Created on 28 January 2025, 3 months ago

Motivation

I am updating from 2.6 to 2.12 and at some point an access check was added for FieldWidgetDisplay/RenderedEntity
I it could be handy to have a checkbox in the widget configuration that disables access checking for the entities rendered because sometime you just want to display the label + some other field and a lot of calculations can be save if the site builder knows a certain display mode is not dangerous and can be rendered "insecurely".

Currently I extend the RenderedEntity class and copy the view method without the access checking but I think the code can integrated better in the RenderedEntity class with a nice configuration form. Unchecked/off by default of course.

What do you think about adding this feature to the module?

Proposed resolution

Add a checkbox with the label "skip access checking for the rendered entity" in the config form and do a bypass the access check when the skip is enabled.

Remaining tasks

Code

User interface changes

New checkbox for configuration

API changes

Data model changes

Feature request
Status

Active

Version

2.0

Component

Display plugins

Created by

🇪🇸Spain rodrigoaguilera Barcelona

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024