From 32291d759cb9abbc914f155ab10490620bb4a264 Mon Sep 17 00:00:00 2001
From: Paul Pound <ppound@upei.ca>
Date: Mon, 18 Dec 2023 10:40:58 -0400
Subject: [PATCH] added access check to entity queries that were missing the
 check

---
 src/Plugin/Field/FieldType/ReserveCategory.php         | 9 +++++----
 src/Plugin/Field/FieldWidget/ReserveCategorySelect.php | 5 +++--
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/src/Plugin/Field/FieldType/ReserveCategory.php b/src/Plugin/Field/FieldType/ReserveCategory.php
index d7772ae..29f3d2d 100644
--- a/src/Plugin/Field/FieldType/ReserveCategory.php
+++ b/src/Plugin/Field/FieldType/ReserveCategory.php
@@ -1,5 +1,5 @@
 <?php
-  
+
 namespace Drupal\reserve\Plugin\Field\FieldType;
 
 use Drupal\Core\Field\FieldItemBase;
@@ -21,7 +21,7 @@ use Drupal\Core\TypedData\DataDefinition;
  *   category = @Translation("Reference"),
  *   cardinality = 1,
  * )
- * 
+ *
  */
 class ReserveCategory extends FieldItemBase implements FieldItemInterface {
   /**
@@ -64,7 +64,8 @@ class ReserveCategory extends FieldItemBase implements FieldItemInterface {
    */
   public function fieldSettingsForm(array $form, FormStateInterface $form_state) {
     // get a list of all Reserve Categories
-    $ids = \Drupal::entityQuery('reserve_category')->sort('name', 'ASC')->execute();
+    $ids = \Drupal::entityQuery('reserve_category')->accessCheck(TRUE)
+      ->sort('name', 'ASC')->execute();
     $categories =  \Drupal\reserve\Entity\ReserveCategory::loadMultiple($ids);
     $options = array();
     foreach ($categories as $cat) {
@@ -113,4 +114,4 @@ class ReserveCategory extends FieldItemBase implements FieldItemInterface {
     ] + parent::defaultFieldSettings();
   }
 
-}
\ No newline at end of file
+}
diff --git a/src/Plugin/Field/FieldWidget/ReserveCategorySelect.php b/src/Plugin/Field/FieldWidget/ReserveCategorySelect.php
index 7b73085..75c0da9 100644
--- a/src/Plugin/Field/FieldWidget/ReserveCategorySelect.php
+++ b/src/Plugin/Field/FieldWidget/ReserveCategorySelect.php
@@ -30,7 +30,8 @@ class ReserveCategorySelect extends WidgetBase {
     // get a list of all Reserve Categories for this bundle
     $set = $items->getSettings()['categories'];
 
-    $ids = \Drupal::entityQuery('reserve_category')->sort('name', 'ASC')->execute();
+    $ids = \Drupal::entityQuery('reserve_category')->accessCheck(TRUE)
+      ->sort('name', 'ASC')->execute();
     $categories =  ReserveCategory::loadMultiple($ids);
     $options = array();
     foreach ($categories as $key => $cat) {
@@ -47,4 +48,4 @@ class ReserveCategorySelect extends WidgetBase {
     return array('cid' => $element);
   }
 
-}
\ No newline at end of file
+}