Unpublished book pages in html export - add config to restrict to published nodes
>>> [!note] Migrated issue
<!-- Drupal.org comment -->
<!-- Migrated from issue #3228274. -->
Reported by: [dbielke1986](https://www.drupal.org/user/3426903)
Related to !63
>>>
<h3>Note on Security</h3>
<p>The Drupal Security Team was made aware of this issue and after evaluating, determined this is not a security issue.</p>
<h3 id="summary-problem-motivation">Problem/Motivation</h3>
<p>With Drupal 9.2 the following patch/issue was resolved:<br>
<a href="https://www.drupal.org/project/drupal/issues/2470896">Make Book navigation translatable</a></p>
<p>Like I also mentioned in this issue (<a href="https://www.drupal.org/project/drupal/issues/2470896#comment-14038900">#241</a>), there were patches with a request to address an issue of unexpected behavior: unpublished nodes get into the export of the book if the current user can access them</p>
<h4 id="summary-steps-reproduce">Steps to reproduce</h4>
<ol>
<li>Create a book content with workflow activated</li>
<li>Publish some nodes and subnodes</li>
<li>Put a node in an unpublished state (e.g. archived)</li>
<li>use the print preview / html export as a user who can access the archived node</li>
</ol>
<h3 id="summary-proposed-resolution">Proposed resolution</h3>
<p>Unpublished nodes should not be part of the html export</p>
<h3 id="summary-remaining-tasks">Remaining tasks</h3>
<p>Create patch</p>
<h3 id="summary-ui-changes">User interface changes</h3>
<h3 id="summary-api-changes">API changes</h3>
<h3 id="summary-data-model-changes">Data model changes</h3>
<h3 id="summary-release-notes">Release notes snippet</h3>
> Related issue: [Issue #2470896](https://www.drupal.org/node/2470896)
issue