ApiAutoSaveControllerTest::testPost should use a less power for permission than 'bypass node access'

Created on 11 July 2025, 2 days ago

Overview

Follow-up to πŸ› Pending changes leaking entities that user might have no access to Active

In \Drupal\Tests\experience_builder\Kernel\ApiAutoSaveControllerTest::testPost is given the 'bypass node access', permission to make sure they can see and edit the articles in the auto-save. But this is very powerful permission that could have side-effects

Proposed resolution

Give the user less power permission or other alter their access. We could use xb_test_access to even make a new permission

User interface changes

πŸ“Œ Task
Status

Active

Version

0.0

Component

Auto-save

Created by

πŸ‡ΊπŸ‡ΈUnited States tedbow Ithaca, NY, USA

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024