Issue #2696669 by mbovan, Berdir, sanja_m: Incomplete/broken access checking in EntityController::addPage() (cherry picked from commit 4b265669)