Issue #3179850 by claudiu.cristea: EntityTestAccessControlHandler allows viewing an unpublished entity

merge-requests/3505/head
catch 2023-02-20 11:23:47 +00:00
parent e2f74f5398
commit 7de47b04ec
1 changed files with 3 additions and 0 deletions

View File

@ -55,6 +55,9 @@ class EntityTestAccessControlHandler extends EntityAccessControlHandler {
return AccessResult::allowedIfHasPermission($account, 'view test entity translations');
}
}
if ($entity instanceof EntityPublishedInterface && !$entity->isPublished()) {
return AccessResult::neutral('Unpublished entity');
}
return AccessResult::allowedIfHasPermission($account, 'view test entity');
}
elseif (in_array($operation, ['update', 'delete'])) {