From 09c541a2209264d6ac72b09a3f3d8c12906c93da Mon Sep 17 00:00:00 2001 From: webchick Date: Wed, 14 Nov 2012 02:26:54 -0800 Subject: [PATCH] Issue #1790964 by anzi31, dawehner, xjm, tim.plunkett: Document that ViewExecutable::preview() doesn't call ViewExecutable::access(). --- core/modules/views/lib/Drupal/views/ViewExecutable.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/core/modules/views/lib/Drupal/views/ViewExecutable.php b/core/modules/views/lib/Drupal/views/ViewExecutable.php index 4ad1633f8bd..639cd92bbd0 100644 --- a/core/modules/views/lib/Drupal/views/ViewExecutable.php +++ b/core/modules/views/lib/Drupal/views/ViewExecutable.php @@ -1384,6 +1384,11 @@ class ViewExecutable { * To be called externally, probably by an AJAX handler of some flavor. * Can also be called when views are embedded, as this guarantees * normalized output. + * + * This function does not do any access checks on the view. It is the + * responsibility of the caller to check $view->access() or implement other + * access logic. To render the view normally with access checks, use + * views_embed_view() instead. */ public function preview($display_id = NULL, $args = array()) { if (empty($this->current_display) || ((!empty($display_id)) && $this->current_display != $display_id)) {