From 1291450a0d1e1609be2bbf261e28d26e3736e1ef Mon Sep 17 00:00:00 2001
From: Alex Pott <alex.a.pott@googlemail.com>
Date: Fri, 26 Mar 2021 00:09:48 +0000
Subject: [PATCH] Issue #3204140 by jonathanshaw, catch: EntityQuery
accessCheck: menu_ui_get_menu_link_defaults() should not be access sensitive
---
core/modules/menu_ui/menu_ui.module | 2 ++
1 file changed, 2 insertions(+)
diff --git a/core/modules/menu_ui/menu_ui.module b/core/modules/menu_ui/menu_ui.module
index 5661b6b835c7..e3e6cc08b2dd 100644
--- a/core/modules/menu_ui/menu_ui.module
+++ b/core/modules/menu_ui/menu_ui.module
@@ -139,6 +139,7 @@ function menu_ui_get_menu_link_defaults(NodeInterface $node) {
$type_menus = $node_type->getThirdPartySetting('menu_ui', 'available_menus', ['main']);
if (in_array($menu_name, $type_menus)) {
$query = \Drupal::entityQuery('menu_link_content')
+ ->accessCheck(TRUE)
->condition('link.uri', 'node/' . $node->id())
->condition('menu_name', $menu_name)
->sort('id', 'ASC')
@@ -150,6 +151,7 @@ function menu_ui_get_menu_link_defaults(NodeInterface $node) {
// Check all allowed menus if a link does not exist in the default menu.
if (!$id && !empty($type_menus)) {
$query = \Drupal::entityQuery('menu_link_content')
+ ->accessCheck(TRUE)
->condition('link.uri', 'entity:node/' . $node->id())
->condition('menu_name', array_values($type_menus), 'IN')
->sort('id', 'ASC')
--
GitLab