The editing and deletion link don't show up in the overview, but they can still be accessed via their URL.

Apparently an _entity_access check is required in the route definition.

CommentFileSizeAuthor
#3 0001-Issue-2629874-Add-_entity_access-to-routes.patch2.2 KBcburschka

Comments

cburschka created an issue. See original summary.

cburschka’s picture

cburschka
they
commented
Title: Uneditable tags can be deleted » Entity forms can be accessed directly
Issue summary: View changes
cburschka’s picture

cburschka
they
commented
Status: Active » Needs review
StatusFileSize
new 0001-Issue-2629874-Add-_entity_access-to-routes.patch2.2 KB

Includes test case.

  • cburschka committed 145350a on 8.x-3.x 
    Issue #2629874: Add _entity_access to routes.

The entity access...
cburschka’s picture

cburschka
they
commented
Status: Needs review » Fixed

Pushed.

  • cburschka committed 145350a on 9.x-1.x 
    Issue #2629874: Add _entity_access to routes.

The entity access...

  • cburschka committed 145350a on 9.x-2.x 
    Issue #2629874: Add _entity_access to routes.

The entity access...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.