Merge pull request #296 from esmero/ISSUE-294

ISSUE-294: Fix missing access check on entity query
esmero · Jan 31, 2024 · 88714ca · 88714ca
2 parents ff229bb + ad7cd37
commit 88714ca
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/StrawberryfieldFilePersisterService.php b/src/StrawberryfieldFilePersisterService.php
@@ -1080,7 +1080,7 @@ public function removeUsageFilesInJson(ContentEntityInterface $entity) {
             $values = \Drupal::entityQuery($entity_type_id)->condition(
               'nid',
               $id
-            )->execute();
+            )->accessCheck(FALSE)->execute();
             if (empty($values)) {
               $this->remove_file_usage($file, $id, $entity_type_id, 0);
               $orphaned++;