Drupal 8/9: Media entities, private files and broken access control
October 01, 2020
Recently, I came across an issue where private files in media entities, that were embedded in a paragraph, were accessible by anonymous users. While a user could not get access to the page, access was allowed ...
