comparison core/modules/layout_builder/src/Access/LayoutBuilderAccessCheck.php @ 5:12f9dff5fda9 tip

Update to Drupal core 8.7.1

 <?php
 
 namespace Drupal\layout_builder\Access;
 
+use Drupal\Core\Access\AccessResult;
 use Drupal\Core\Cache\RefinableCacheableDependencyInterface;
 use Drupal\Core\Routing\Access\AccessInterface;
 use Drupal\Core\Session\AccountInterface;
 use Drupal\layout_builder\SectionStorageInterface;
 use Symfony\Component\Routing\Route;
 
 /**
  * Provides an access check for the Layout Builder defaults.
  *
+ * @ingroup layout_builder_access
+ *
  * @internal
+ *   Tagged services are internal.
  */
 class LayoutBuilderAccessCheck implements AccessInterface {
 
   /**
    * Checks routing access to the layout.

    *   The access result.
    */
   public function access(SectionStorageInterface $section_storage, AccountInterface $account, Route $route) {
     $operation = $route->getRequirement('_layout_builder_access');
     $access = $section_storage->access($operation, $account, TRUE);
+
+    // Check for the global permission unless the section storage checks
+    // permissions itself.
+    if (!$section_storage->getPluginDefinition()->get('handles_permission_check')) {
+      $access = $access->andIf(AccessResult::allowedIfHasPermission($account, 'configure any layout'));
+    }
+
     if ($access instanceof RefinableCacheableDependencyInterface) {
       $access->addCacheableDependency($section_storage);
     }
     return $access;
   }