entity_reference_unpublished
2,456 sites
Security covered
Drupal core's entity reference selection plugin for nodes only allows referencing unpublished nodes if the logged in user has the "bypass node access" permission. This is a very powerful permission that you may not want to give to your editors. This module provides an alternate entity reference selection plugin that does not require that permission for referencing unpublished nodes.
Once https://www.drupal.org/project/drupal/issues/2845144 has been merged to core, this module may be deprecated.