Missing access check on entityQuery