tvi-views-access.patch

tvi-views-access.patch

diff --git a/src/Service/TaxonomyViewsIntegratorManager.php b/src/Service/TaxonomyViewsIntegratorManager.php
index 23f6dd9..fd2f47e 100644
--- a/src/Service/TaxonomyViewsIntegratorManager.php
+++ b/src/Service/TaxonomyViewsIntegratorManager.php
@@ -153,6 +153,13 @@ class TaxonomyViewsIntegratorManager implements TaxonomyViewsIntegratorManagerIn
         ->view($taxonomy_term, 'full');
     }

+    // @todo: Access-control, is it worth addressing?
+    if (!$build['#view'] || !$build['#view']->access($build['#view']->current_display)) {
+      // here we return a 403
+      // you might advise to use views_embed_view
+      throw new AccessDeniedHttpException();
+    }
+
     return $build;
   }