Issue #3204475 by Anybody, DieterHolvoet, mauritsl, artis: Review access checks

existing_values_autocomplete_widget.routing.yml

@@ -9,4 +9,4 @@ existing_values_autocomplete_widget.autocomplete:
     count: 15
     entity_type_id: NULL
   requirements:
-    _permission: 'administer nodes'
+    _permission: 'access content'

src/Controller/AutocompleteController.php

@@ -39,8 +39,9 @@ class AutocompleteController extends ControllerBase {
       $results = $query->execute()->fetchAllKeyed();
 
       foreach ($results as $id => $value) {
+        /** @var \Drupal\Core\Entity\FieldableEntityInterface $entity */
         $entity = $entity_type_manager->getStorage($entity_type_id)->load($id);
-        if ($entity->access('edit')) {
+        if ($entity->access('view') && $entity->get($field_name)->access('view')) {
           $existing_values[$value] = [
             'value' => $value,
             'label' => $value,