Unpublished book pages in html export - add config to restrict to published nodes
>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3228274. --> Reported by: [dbielke1986](https://www.drupal.org/user/3426903) Related to !63 >>> <h3>Note on Security</h3> <p>The Drupal Security Team was made aware of this issue and after evaluating, determined this is not a security issue.</p> <h3 id="summary-problem-motivation">Problem/Motivation</h3> <p>With Drupal 9.2 the following patch/issue was resolved:<br> <a href="https://www.drupal.org/project/drupal/issues/2470896">Make Book navigation translatable</a></p> <p>Like I also mentioned in this issue (<a href="https://www.drupal.org/project/drupal/issues/2470896#comment-14038900">#241</a>), there were patches with a request to address an issue of unexpected behavior: unpublished nodes get into the export of the book if the current user can access them</p> <h4 id="summary-steps-reproduce">Steps to reproduce</h4> <ol> <li>Create a book content with workflow activated</li> <li>Publish some nodes and subnodes</li> <li>Put a node in an unpublished state (e.g. archived)</li> <li>use the print preview / html export as a user who can access the archived node</li> </ol> <h3 id="summary-proposed-resolution">Proposed resolution</h3> <p>Unpublished nodes should not be part of the html export</p> <h3 id="summary-remaining-tasks">Remaining tasks</h3> <p>Create patch</p> <h3 id="summary-ui-changes">User interface changes</h3> <h3 id="summary-api-changes">API changes</h3> <h3 id="summary-data-model-changes">Data model changes</h3> <h3 id="summary-release-notes">Release notes snippet</h3> > Related issue: [Issue #2470896](https://www.drupal.org/node/2470896)
issue