feat: #3372919 Auto-create should respect access checks when flagged

Christian López Espínolarequested to merge
issue/drupal-3372919:3372919-entity-reference-selection-create-access-check into main
  • Auto-create access checks for the current user (we deliberately omitted checking the owner that will be assigned to the entity if implementing EntityOwnerInterface)
  • Include the flag in shipped config, defaulting to true.
  • Upgrade path + upgrade path tests, defaulting to false to keep the current behavior.
  • Extra hardening: this check is also added to \Drupal\Core\Entity\Plugin\EntityReferenceSelection\DefaultSelection::createNewEntity in case some child selection plugin was calling that method directly.

Closes #3372919

Edited by Christian López Espínola

Merge request reports