Pimcore Studio allows publishing data objects despite workflow publish: false

[movingthings]

Affected Version

2025.4 - LTS

Affected capability

Data Objects

Steps to reproduce

1. Create a simple data object class, for example DemoItem.

2. Add a field for the workflow marking store, for example workflowState.

3. Configure a workflow for that class with a place that denies publishing:

pimcore:
  workflows:
    demo_lifecycle:
      enabled: true
      type: state_machine
      support_strategy:
        type: expression
        arguments:
          - App\Model\DataObject\DemoItem
          - 'subject.getType() == "object"'
      marking_store:
        type: single_state
        arguments:
          - workflowState
      initial_markings:
        - draft
      places:
        draft:
          permissions:
            -
              publish: false
        approved:
          permissions:
            -
              publish: true
      transitions:
        approve:
          from: draft
          to: approved

4. Create a DemoItem object in the draft workflow place.

5. Ensure the current user otherwise has regular data object workspace publish permission.

6. Open the object in Pimcore Studio.

7. Click “Save & Publish”.

Actual Behavior

The object is successfully published, even though the current workflow place has publish: false.

Expected Behavior

Pimcore Studio should respect workflow place permissions when publishing data objects.
If the current workflow place denies publish, Studio should not allow publishing. Ideally the UI should hide or disable “Save & Publish”, and the backend should reject publish attempts as well.