All core entities except File implement a createAccess() override. As the default return value of Entity::access is TRUE, this leads to the problem that the value for File is always TRUE - ignoring "create files" permission.
Our assumption is currently, that not creating that override when adding entity_access in #3011 was an oversight.
I'm not sure if this is a bug or a feature request. Feedback is welcome.
Also related: #4975 - TRUE is a dangerous default value, anyway.
Recent comments
Field Collection - This is a field containing several fields, but the set is edited once, like any other fields. You can insert the HTML code of the gallery into the text using Jquery,...
Gallery inside post content
When I want to have flexibility about where different components will be I use Paragraphs. IMHO they are better than Field Collections. You can have paragraphs for text, videos, gallery, or any...
Gallery inside post content
I was thinking about this module. It works, but my goal is to offer the possibility of creating a gallery not in a particular place, but everywhere, with the possibility of changing the location...
Gallery inside post content