Drupal
/
drupal
mirror of https://git.drupalcode.org/project/drupal.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Issue #3179850 by claudiu.cristea: EntityTestAccessControlHandler allows viewing an unpublished entity

merge-requests/3505/head
catch 2023-02-20 11:23:47 +00:00
parent e2f74f5398
commit 7de47b04ec
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
core/modules/system/tests/modules/entity_test/src/EntityTestAccessControlHandler.php
View File

@ -55,6 +55,9 @@ class EntityTestAccessControlHandler extends EntityAccessControlHandler {
return AccessResult::allowedIfHasPermission($account, 'view test entity translations'); return AccessResult::allowedIfHasPermission($account, 'view test entity translations');
} }
} }
if ($entity instanceof EntityPublishedInterface && !$entity->isPublished()) {
return AccessResult::neutral('Unpublished entity');
}
return AccessResult::allowedIfHasPermission($account, 'view test entity'); return AccessResult::allowedIfHasPermission($account, 'view test entity');
} }
elseif (in_array($operation, ['update', 'delete'])) { elseif (in_array($operation, ['update', 'delete'])) {