(fix): if entity is not found, then do not continue to perform the ACL

Author: markharding

Core/Comments/Events.php

@@ -138,8 +138,10 @@ public function register()
             $parentEntity = EntitiesFactory::build($entity->getAccessId());
             $user = $params['user'];
 
-            $canRead = ACL::_()->read($parentEntity, $user);
-            $event->setResponse($canRead);
+            if ($parentEntity) {
+                $canRead = ACL::_()->read($parentEntity, $user);
+                $event->setResponse($canRead);
+            }
         });
 
         // If comment is container_guid then decide if we can allow writing

Helpers/Flags.php

@@ -8,6 +8,10 @@ class Flags
 {
     public static function shouldFail($entity)
     {
+        if (!$entity) {
+            return false;
+        }
+    
         $currentUser = Core\Session::getLoggedInUserGuid();
         $owner = $entity instanceof User ? $entity->guid : $entity->getOwnerGuid();