Issue #3179850 by claudiu.cristea: EntityTestAccessControlHandler allows viewing an unpublished entity

(cherry picked from commit 7de47b04ec)
2023-02-20 11:23:47 +00:00 · 2023-02-20 11:23:47 +00:00 · fdf674a4b1
parent 0e408ae82e
commit fdf674a4b1
1 changed files with 3 additions and 0 deletions
--- a/core/modules/system/tests/modules/entity_test/src/EntityTestAccessControlHandler.php
+++ b/core/modules/system/tests/modules/entity_test/src/EntityTestAccessControlHandler.php
@ -55,6 +55,9 @@ class EntityTestAccessControlHandler extends EntityAccessControlHandler {
          return AccessResult::allowedIfHasPermission($account, 'view test entity translations');
        }
      }
+      if ($entity instanceof EntityPublishedInterface && !$entity->isPublished()) {
+        return AccessResult::neutral('Unpublished entity');
+      }
      return AccessResult::allowedIfHasPermission($account, 'view test entity');
    }
    elseif (in_array($operation, ['update', 'delete'])) {