From e4b4b4317f84c3f2e937775d3962a59162279509 Mon Sep 17 00:00:00 2001
From: Lucas D Hedding <lucashedding@1463982.no-reply.drupal.org>
Date: Tue, 16 Nov 2021 15:48:40 -0600
Subject: [PATCH] Issue #3232208 by Igor Mashevskyi, Matroskeen, heddn: Access
checking must be explicitly specified on entity query
---
src/Entity/MigrationGroup.php | 3 +++
1 file changed, 3 insertions(+)
diff --git a/src/Entity/MigrationGroup.php b/src/Entity/MigrationGroup.php
index 96845b03..f0ca2214 100644
--- a/src/Entity/MigrationGroup.php
+++ b/src/Entity/MigrationGroup.php
@@ -52,6 +52,9 @@ class MigrationGroup extends ConfigEntityBase implements MigrationGroupInterface
public function delete() {
// Delete all migrations contained in this group.
$query = \Drupal::entityQuery('migration')
+ // Access check false because if the user has access to deleting
+ // migration groups they should have access to deleting related migration.
+ ->accessCheck(FALSE)
->condition('migration_group', $this->id());
$names = $query->execute();
--
GitLab