>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3222544. --> Reported by: [baysaa](https://www.drupal.org/user/1358394) Related to !10 >>> <h3 id="summary-problem-motivation">Problem/Motivation</h3> <p>Looks like access checks are not done before referenced entities are built. </p> <h4 id="summary-steps-reproduce">Steps to reproduce</h4> <p>Use `BuildFieldTrait::buildEntities` or `BuildFieldTrait::buildReferencedEntities` (and possibly more) methods and output a field referencing unpublished entities. Then view the output as an anonymous - assumed permissions are set so anon can't see unpublished content.</p> <p>Expected result:<br> Nothing is shown</p> <p>Actual result:<br> Unpublished entities are output.</p>