diff --git a/composer.json b/composer.json
index abd88dc4684a47435eadda6cd544d64c195a876c..c339b9ba1d53e4f7c197dedadbb404fa2039cc27 100644
--- a/composer.json
+++ b/composer.json
@@ -106,7 +106,7 @@
         "drupal/core-composer-scaffold": "^9.0",
         "drupal/core-recommended": "8.9.14",
         "drupal/crop": "2.1",
-        "drupal/ctools": "3.5",
+        "drupal/ctools": "3.6",
         "drupal/dropzonejs": "2.5",
         "drupal/editor_advanced_link": "1.8",
         "drupal/embed": "1.4",
diff --git a/composer.lock b/composer.lock
index b59fa9f3b0bb260716e56f5951f14ad32155b176..926678b571a6c0711e9f31c8165e54c79c90cb30 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "4f4a73e297d9307128a77fa7163e626e",
+    "content-hash": "4f162d7bd155c17ba0c04ebcb49b185b",
     "packages": [
         {
             "name": "alchemy/zippy",
@@ -3674,17 +3674,17 @@
         },
         {
             "name": "drupal/ctools",
-            "version": "3.5.0",
+            "version": "3.6.0",
             "source": {
                 "type": "git",
                 "url": "https://git.drupalcode.org/project/ctools.git",
-                "reference": "8.x-3.5"
+                "reference": "8.x-3.6"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://ftp.drupal.org/files/projects/ctools-8.x-3.5.zip",
-                "reference": "8.x-3.5",
-                "shasum": "0113cd1e787ff3bde088c836c2d79d14136b0013"
+                "url": "https://ftp.drupal.org/files/projects/ctools-8.x-3.6.zip",
+                "reference": "8.x-3.6",
+                "shasum": "9a849bb6ac9f4d02603d04b3265b35b7329e1ef5"
             },
             "require": {
                 "drupal/core": "^8.8 || ^9"
@@ -3692,8 +3692,8 @@
             "type": "drupal-module",
             "extra": {
                 "drupal": {
-                    "version": "8.x-3.5",
-                    "datestamp": "1618592931",
+                    "version": "8.x-3.6",
+                    "datestamp": "1620838181",
                     "security-coverage": {
                         "status": "covered",
                         "message": "Covered by Drupal's security advisory policy"
diff --git a/vendor/composer/InstalledVersions.php b/vendor/composer/InstalledVersions.php
index d8369eb84588c45975136212196b44d249c6f60b..a2871d3d1d1dc20bfd7fe048199453e4bf3e6bb6 100644
--- a/vendor/composer/InstalledVersions.php
+++ b/vendor/composer/InstalledVersions.php
@@ -19,7 +19,7 @@ class InstalledVersions
     'aliases' => 
     array (
     ),
-    'reference' => 'eda146158c134a52fb92686a2d4731493a786feb',
+    'reference' => 'd4b4464a481d2dcac95e7ed82f8694d976fd33fe',
     'name' => 'osu-asc-webservices/d8-upstream',
   ),
   'versions' => 
@@ -873,12 +873,12 @@ class InstalledVersions
     ),
     'drupal/ctools' => 
     array (
-      'pretty_version' => '3.5.0',
-      'version' => '3.5.0.0',
+      'pretty_version' => '3.6.0',
+      'version' => '3.6.0.0',
       'aliases' => 
       array (
       ),
-      'reference' => '8.x-3.5',
+      'reference' => '8.x-3.6',
     ),
     'drupal/datetime' => 
     array (
@@ -2276,7 +2276,7 @@ class InstalledVersions
       'aliases' => 
       array (
       ),
-      'reference' => 'eda146158c134a52fb92686a2d4731493a786feb',
+      'reference' => 'd4b4464a481d2dcac95e7ed82f8694d976fd33fe',
     ),
     'pantheon-systems/quicksilver-pushback' => 
     array (
diff --git a/vendor/composer/installed.json b/vendor/composer/installed.json
index 94aa425280b174e13650f0b394de0bfde3f8f2ff..b70554627cf40c135fad901ec833df1aeee8a9e8 100644
--- a/vendor/composer/installed.json
+++ b/vendor/composer/installed.json
@@ -3718,18 +3718,18 @@
         },
         {
             "name": "drupal/ctools",
-            "version": "3.5.0",
-            "version_normalized": "3.5.0.0",
+            "version": "3.6.0",
+            "version_normalized": "3.6.0.0",
             "source": {
                 "type": "git",
                 "url": "https://git.drupalcode.org/project/ctools.git",
-                "reference": "8.x-3.5"
+                "reference": "8.x-3.6"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://ftp.drupal.org/files/projects/ctools-8.x-3.5.zip",
-                "reference": "8.x-3.5",
-                "shasum": "0113cd1e787ff3bde088c836c2d79d14136b0013"
+                "url": "https://ftp.drupal.org/files/projects/ctools-8.x-3.6.zip",
+                "reference": "8.x-3.6",
+                "shasum": "9a849bb6ac9f4d02603d04b3265b35b7329e1ef5"
             },
             "require": {
                 "drupal/core": "^8.8 || ^9"
@@ -3737,8 +3737,8 @@
             "type": "drupal-module",
             "extra": {
                 "drupal": {
-                    "version": "8.x-3.5",
-                    "datestamp": "1618592931",
+                    "version": "8.x-3.6",
+                    "datestamp": "1620838181",
                     "security-coverage": {
                         "status": "covered",
                         "message": "Covered by Drupal's security advisory policy"
diff --git a/vendor/composer/installed.php b/vendor/composer/installed.php
index 0e19a8840a3c2a9ce6deae6a55b53a2ecc122d94..b420fd47d94665d1b9d6e40f33c4649b26a7553c 100644
--- a/vendor/composer/installed.php
+++ b/vendor/composer/installed.php
@@ -6,7 +6,7 @@
     'aliases' => 
     array (
     ),
-    'reference' => 'eda146158c134a52fb92686a2d4731493a786feb',
+    'reference' => 'd4b4464a481d2dcac95e7ed82f8694d976fd33fe',
     'name' => 'osu-asc-webservices/d8-upstream',
   ),
   'versions' => 
@@ -860,12 +860,12 @@
     ),
     'drupal/ctools' => 
     array (
-      'pretty_version' => '3.5.0',
-      'version' => '3.5.0.0',
+      'pretty_version' => '3.6.0',
+      'version' => '3.6.0.0',
       'aliases' => 
       array (
       ),
-      'reference' => '8.x-3.5',
+      'reference' => '8.x-3.6',
     ),
     'drupal/datetime' => 
     array (
@@ -2263,7 +2263,7 @@
       'aliases' => 
       array (
       ),
-      'reference' => 'eda146158c134a52fb92686a2d4731493a786feb',
+      'reference' => 'd4b4464a481d2dcac95e7ed82f8694d976fd33fe',
     ),
     'pantheon-systems/quicksilver-pushback' => 
     array (
diff --git a/web/modules/ctools/ctools.info.yml b/web/modules/ctools/ctools.info.yml
index 203c2c66b432a54b51b4c5fc0d430586830ecffb..4b146efe6f7836546a9eb8424b1c0b0a106de5cd 100644
--- a/web/modules/ctools/ctools.info.yml
+++ b/web/modules/ctools/ctools.info.yml
@@ -4,7 +4,7 @@ description: 'Provides a number of utility and helper APIs for Drupal developers
 package: Chaos tool suite
 core_version_requirement: ^8.8 || ^9
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/modules/ctools_block/ctools_block.info.yml b/web/modules/ctools/modules/ctools_block/ctools_block.info.yml
index aa5a8e0d938186c5715bbf7886840f1bc338dc0a..d8a437eb9cfa592e1f7dcb73a328dacc69e440de 100644
--- a/web/modules/ctools/modules/ctools_block/ctools_block.info.yml
+++ b/web/modules/ctools/modules/ctools_block/ctools_block.info.yml
@@ -6,7 +6,7 @@ core_version_requirement: ^8.8 || ^9
 dependencies:
   - ctools:ctools
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/modules/ctools_block/tests/modules/ctools_block_field_test/ctools_block_field_test.info.yml b/web/modules/ctools/modules/ctools_block/tests/modules/ctools_block_field_test/ctools_block_field_test.info.yml
index 76e91210f42a52560b06ae0327d79d06f0612625..527af80d1db202df978927f7208969cbe820b0fc 100644
--- a/web/modules/ctools/modules/ctools_block/tests/modules/ctools_block_field_test/ctools_block_field_test.info.yml
+++ b/web/modules/ctools/modules/ctools_block/tests/modules/ctools_block_field_test/ctools_block_field_test.info.yml
@@ -12,7 +12,7 @@ dependencies:
   - drupal:user
 features: true
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/modules/ctools_entity_mask/ctools_entity_mask.info.yml b/web/modules/ctools/modules/ctools_entity_mask/ctools_entity_mask.info.yml
index 8819c3ce5641db4766f48b360d1a8e4e44f3a5f9..837296665532f5a08a8dfe21d1419642247a6339 100644
--- a/web/modules/ctools/modules/ctools_entity_mask/ctools_entity_mask.info.yml
+++ b/web/modules/ctools/modules/ctools_entity_mask/ctools_entity_mask.info.yml
@@ -3,7 +3,7 @@ core_version_requirement: ^8.8 || ^9
 type: module
 description: 'Allows an entity type to borrow the fields and display configuration of another entity type.'
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/modules/ctools_entity_mask/tests/modules/entity_mask_test/entity_mask_test.info.yml b/web/modules/ctools/modules/ctools_entity_mask/tests/modules/entity_mask_test/entity_mask_test.info.yml
index f0e2de495fb136d913cee16aad6c5293d59f3504..32111c29c682b78a649ce793aa249397523c4029 100644
--- a/web/modules/ctools/modules/ctools_entity_mask/tests/modules/entity_mask_test/entity_mask_test.info.yml
+++ b/web/modules/ctools/modules/ctools_entity_mask/tests/modules/entity_mask_test/entity_mask_test.info.yml
@@ -7,7 +7,7 @@ dependencies:
   - drupal:image
   - drupal:text
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/modules/ctools_views/ctools_views.info.yml b/web/modules/ctools/modules/ctools_views/ctools_views.info.yml
index 81d3ffe34400f2aeb484145381acab659192ec97..8be583a3ec3da178c2399e0ea48268415ffa83bd 100644
--- a/web/modules/ctools/modules/ctools_views/ctools_views.info.yml
+++ b/web/modules/ctools/modules/ctools_views/ctools_views.info.yml
@@ -8,7 +8,7 @@ dependencies:
   - drupal:block
   - drupal:views
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/modules/ctools_views/tests/modules/ctools_views_test_views/ctools_views_test_views.info.yml b/web/modules/ctools/modules/ctools_views/tests/modules/ctools_views_test_views/ctools_views_test_views.info.yml
index 5ae3ad76755579f37a526774a353d177e190e4b6..b45c39457d2f79413f00848c4276ad8e01d3c6a3 100644
--- a/web/modules/ctools/modules/ctools_views/tests/modules/ctools_views_test_views/ctools_views_test_views.info.yml
+++ b/web/modules/ctools/modules/ctools_views/tests/modules/ctools_views_test_views/ctools_views_test_views.info.yml
@@ -12,7 +12,7 @@ dependencies:
     - drupal:node
     - drupal:taxonomy
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/src/Plugin/Block/EntityView.php b/web/modules/ctools/src/Plugin/Block/EntityView.php
index 9b64fddba981c7011d3f204d9a62a0d8912c1c1b..ee96934641b63f5d065dff6d0ee55e9a46f1dd67 100644
--- a/web/modules/ctools/src/Plugin/Block/EntityView.php
+++ b/web/modules/ctools/src/Plugin/Block/EntityView.php
@@ -9,6 +9,7 @@
 use Drupal\Core\Form\FormStateInterface;
 use Drupal\Core\Plugin\ContainerFactoryPluginInterface;
 use Drupal\Core\Plugin\ContextAwarePluginInterface;
+use Drupal\Core\Session\AccountInterface;
 use Symfony\Component\DependencyInjection\ContainerInterface;
 
 /**
@@ -98,6 +99,15 @@ public function blockSubmit($form, FormStateInterface $form_state) {
     $this->configuration['view_mode'] = $form_state->getValue('view_mode');
   }
 
+  /**
+   * {@inheritdoc}
+   */
+  public function access(AccountInterface $account, $return_as_object = FALSE) {
+    /** @var $entity \Drupal\Core\Entity\EntityInterface */
+    $entity = $this->getContextValue('entity');
+    return $entity->access('view', $account, $return_as_object);
+  }
+
   /**
    * {@inheritdoc}
    */
diff --git a/web/modules/ctools/tests/modules/ctools_block_display_test/ctools_block_display_test.info.yml b/web/modules/ctools/tests/modules/ctools_block_display_test/ctools_block_display_test.info.yml
index 10087d2558373d3b4bc4f92bf659636e1435f447..a139b90e8fa51cc55ba27d0a2d0eba19feca1040 100644
--- a/web/modules/ctools/tests/modules/ctools_block_display_test/ctools_block_display_test.info.yml
+++ b/web/modules/ctools/tests/modules/ctools_block_display_test/ctools_block_display_test.info.yml
@@ -6,7 +6,7 @@ package: Testing
 dependencies:
   - ctools:ctools
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/tests/modules/ctools_wizard_test/ctools_wizard_test.info.yml b/web/modules/ctools/tests/modules/ctools_wizard_test/ctools_wizard_test.info.yml
index 5c03d76218896ad34329f8b9b40055048e53ebcd..34cdd603b66ccf9e4a419a24612c268cdcfc0f74 100644
--- a/web/modules/ctools/tests/modules/ctools_wizard_test/ctools_wizard_test.info.yml
+++ b/web/modules/ctools/tests/modules/ctools_wizard_test/ctools_wizard_test.info.yml
@@ -4,7 +4,7 @@ description: 'Provides testing for ctools wizard'
 package: Testing
 # version: 3.x
 
-# Information added by Drupal.org packaging script on 2021-04-16
-version: '8.x-3.5'
+# Information added by Drupal.org packaging script on 2021-05-12
+version: '8.x-3.6'
 project: 'ctools'
-datestamp: 1618592933
+datestamp: 1620832815
diff --git a/web/modules/ctools/tests/src/Kernel/Plugin/Block/EntityViewTest.php b/web/modules/ctools/tests/src/Kernel/Plugin/Block/EntityViewTest.php
new file mode 100644
index 0000000000000000000000000000000000000000..4e53dd22c8f31917d89270e82e25b5216445c7f2
--- /dev/null
+++ b/web/modules/ctools/tests/src/Kernel/Plugin/Block/EntityViewTest.php
@@ -0,0 +1,87 @@
+<?php
+
+namespace Drupal\Tests\ctools\Kernel\Plugin\Block;
+
+use Drupal\Core\Access\AccessResultForbidden;
+use Drupal\Core\Plugin\Context\ContextDefinition;
+use Drupal\ctools\Plugin\Block\EntityView;
+use Drupal\KernelTests\KernelTestBase;
+use Drupal\Tests\node\Traits\NodeCreationTrait;
+use Drupal\Tests\user\Traits\UserCreationTrait;
+
+/**
+ * Tests the entity_view block plugin.
+ *
+ * @coversDefaultClass \Drupal\ctools\Plugin\Block\EntityView
+ *
+ * @group ctools
+ */
+class EntityViewTest extends KernelTestBase {
+
+  use NodeCreationTrait;
+  use UserCreationTrait;
+
+  /**
+   * {@inheritdoc}
+   */
+  public static $modules = [
+    'block',
+    'ctools',
+    'filter',
+    'node',
+    'system',
+    'user',
+  ];
+
+  /**
+   * A page variant.
+   *
+   * @var \Drupal\page_manager\PageVariantInterface
+   */
+  protected $pageVariant;
+
+  /**
+   * {@inheritdoc}
+   */
+  protected function setUp() {
+    parent::setUp();
+
+    $this->installConfig(['filter']);
+    $this->installEntitySchema('node');
+    $this->installEntitySchema('user');
+    $this->installSchema('system', ['sequences']);
+  }
+
+  /**
+   * Tests plugin access.
+   *
+   * @covers ::access
+   */
+  public function testAccess() {
+    // Create an unpublished node.
+    $node = $this->createNode(['status' => 0]);
+
+    $configuration = [
+      'view_mode' => 'default',
+      'context' => [
+        'entity' => $node,
+      ],
+    ];
+    $definition = [
+      'context' => [
+        'entity' => new ContextDefinition('entity:node', NULL, TRUE, FALSE, NULL, $node),
+      ],
+      'provider' => 'ctools',
+    ];
+    $block = EntityView::create($this->container, $configuration, 'entity_view:node', $definition);
+
+    $access = $block->access(\Drupal::currentUser());
+    $this->assertFalse($access);
+
+    // Add a user than can see the unpublished block.
+    $account = $this->createUser([], NULL, TRUE);
+    $access = $block->access($account);
+    $this->assertTrue($access);
+  }
+
+}