Contrib.social

Config Page entity field formatter does not respect permissions

Open on Drupal.org →
Created on 7 August 2025, 9 days ago

Problem/Motivation

It seems that the "Config Page entity" field formatter does not respect the permissions set to view config pages. This results in only admin user being able to see config pages rendered through the field formatter.

If a role has the permission to view the specific config page type or any config page type, the field formatter should display the config page to a user with this role.

Steps to reproduce

  • Add an entity reference field for "config page type" to a node (or other entity).
  • Configure display of node or other entity to use the "Config page entity" field formatter.
  • Create a node (or other entity) and select a config page in the entity reference field.
  • Set permission for anonymous users to view the config page type referenced.
  • View the node (or other entity) as an anonymous user.
  • Note that the config page will not be displayed.

Proposed resolution

Change code that checks access in the field formatter (problem is, that field formatter is checking access for 'config page type' entity, while it should check access for 'config page' entity instead).

Remaining tasks

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Active

Version

2.0

Component

Code

Created by

🇩🇪Germany stefan.korn Jossgrund

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024