Quantcast
Channel: Issues for Drupal core
Viewing all articles
Browse latest Browse all 294298

EntityReferenceLabelFormatter returns a link even if the user only have "view label" access

$
0
0

Problem/Motivation

EntityReferenceLabelFormatter properly checks if a user has "view label" entity access (only and not "view" access) but then it still renders a link to the entity's canonical page even if the user only has "view label" access (but not "view" access). When a user clicks on the link it gets a 403 page as they should.

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet


Viewing all articles
Browse latest Browse all 294298

Trending Articles