[4.x]: canView checked directly on element rather than running though the elements service?

[samhibberd]

What happened?

Testing our custom permissions logic and when using the elements/save controller to save elements the canView method is called directly on the element rather that going via the elements service:

cms/src/controllers/ElementsController.php

Line 1905 in da1a32b

if (!$element->canView(static::currentUser())) {

Needs to be updated to:

if (!$elementsService->canView($element, static::currentUser())) {
    throw new ForbiddenHttpException('User not authorized to edit this element.');
}

Similar to craftcms/commerce#3285

Craft CMS version

4.5.11

PHP version

8.2

Operating system and version

No response

Database type and version

No response

Image driver and version

No response

Installed plugins and versions

[i-just]

Hi, thanks for reporting! I raised a PR for it.

[brandonkelly]

Craft 4.5.12 is out with the fix for this. Thanks again!

[samhibberd]

Thanks @brandonkelly perfect timing, launching tomorrow 🥳