Security update for permissions_by_term

[yaffs-website] / web / modules / contrib / permissions_by_term / src / Controller / PermissionsByTermController.php

diff --git a/web/modules/contrib/permissions_by_term/src/Controller/PermissionsByTermController.php b/web/modules/contrib/permissions_by_term/src/Controller/PermissionsByTermController.php
index c35448d8aa1b9099fe464abd2b7b5e600f87f314..4121de26e59d9bbac000dfe02cbbf18bcd704c5b 100644 (file)
--- a/web/modules/contrib/permissions_by_term/src/Controller/PermissionsByTermController.php
+++ b/web/modules/contrib/permissions_by_term/src/Controller/PermissionsByTermController.php
@@ -5,48 +5,12 @@ namespace Drupal\permissions_by_term\Controller;
 use Drupal\Core\Controller\ControllerBase;
 use \Drupal\Component\Utility\Tags;
 use Symfony\Component\HttpFoundation\JsonResponse;
-use \Drupal\permissions_by_term\AccessCheckInterface;
-use \Drupal\Component\Utility\Html;
-use \Drupal\Core\Access\AccessResult;
 
 /**
  * Default controller for the permissions_by_term module.
  */
 class PermissionsByTermController extends ControllerBase {
 
-  /**
-   * PermissionsByTermController constructor.
-   *
-   * @param \Drupal\permissions_by_term\AccessCheckInterface
-   */
-  public function __construct(AccessCheckInterface $access_check_service) {
-    $this->oAccessCheckService = $access_check_service;
-  }
-
-  /**
-   * Handles views in module's logic.
-   */
-  public function handleViews(&$view) {
-    if ($this->oAccessCheckService->viewContainsNode($view) === TRUE) {
-      $this->oAccessCheckService->removeForbiddenNodesFromView($view);
-    }
-  }
-
-  /**
-   * Handles nodes in module's logic.
-   *
-   * @return \Drupal\Core\Access\AccessResult
-   *   The AccessResult object.
-   */
-  public function handleNode($node_id) {
-    if ($this->oAccessCheckService->canUserAccessByNodeId($node_id) === TRUE) {
-      return AccessResult::neutral();
-    }
-    else {
-      return AccessResult::forbidden();
-    }
-  }
-
   /**
    * Returns JSON response for user's autocomplete field in permissions form.
    *
@@ -71,7 +35,7 @@ class PermissionsByTermController extends ControllerBase {
 
     foreach ($aUserIds as $iUserId) {
       $oUser = user_load($iUserId);
-      $matches[$prefix . $oUser->getUsername()] = Html::escape($oUser->getUsername());
+      $matches[$prefix . $oUser->getDisplayName()] = $oUser->getDisplayName();
     }
 
     return new JsonResponse($matches);