Contrib.social

Missing AccessCheck on query in class OrderEventSubscriber

Open on Drupal.org →
Created on 21 March 2025, 16 days ago

In function finalizeCart in OrderEventSubscriber, an AccessCheck is missing 

              $query = $this->entityTypeManager->getStorage('bat_event')->getQuery()
                ->condition('event_series.target_id', $event_series->id());
              $events_created = $query->execute();
🐛 Bug report
Status

Active

Version

11.1

Component

Code

Created by

🇫🇷France Ilyna

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024