Issue #3246371: Add access check to base queries

src/Repository/CommentRepository.php

@@ -25,6 +25,7 @@ class CommentRepository extends EntityRepository {
     $query->condition('comment_type', $this->bundles, 'IN');
     $query->condition('langcode', $this->getLangCode());
     $query->addTag('comment_access');
+    $query->accessCheck();
     return $query;
   }