overviewTableRow() doesn't check entity_access(), so operation links such as 'delete' show even if the user doesn't have the necessary access.

Comments

ronino’s picture

Issue summary: View changes
StatusFileSize
new1.28 KB

The attached patch only adds the edit and delete action links if the user has access to them.