Issue #2696669 by mbovan, Berdir, sanja_m: Incomplete/broken access checking in EntityController::addPage()