Add ::accessCheck() dealio.

discoverygarden · Sep 14, 2023 · cd3e0ce · cd3e0ce
1 parent ee8686e
commit cd3e0ce
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Form/Ingest/FileUpload.php b/src/Form/Ingest/FileUpload.php
@@ -388,6 +388,10 @@ public function save(array $form, FormStateInterface $form_state) {
    */
   public function exist($id) {
     $entity = $this->entityTypeManager->getStorage('isi_request')->getQuery()
+      // XXX: Strictly, this _could_ allow the leak of information regarding the
+      // existence of other requests; however, unsure if we are particularly
+      // concerned.
+      ->accessCheck(FALSE)
       ->condition('id', $id)
       ->execute();
     return (bool) $entity;