Mercurial > hg > cmmr2012-drupal-site
diff core/modules/shortcut/src/ShortcutSetAccessControlHandler.php @ 0:c75dbcec494b
Initial commit from drush-created site
author | Chris Cannam |
---|---|
date | Thu, 05 Jul 2018 14:24:15 +0000 |
parents | |
children | a9cd425dd02b |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/core/modules/shortcut/src/ShortcutSetAccessControlHandler.php Thu Jul 05 14:24:15 2018 +0000 @@ -0,0 +1,49 @@ +<?php + +namespace Drupal\shortcut; + +use Drupal\Core\Access\AccessResult; +use Drupal\Core\Entity\EntityInterface; +use Drupal\Core\Entity\EntityAccessControlHandler; +use Drupal\Core\Session\AccountInterface; + +/** + * Defines the access control handler for the shortcut set entity type. + * + * @see \Drupal\shortcut\Entity\ShortcutSet + */ +class ShortcutSetAccessControlHandler extends EntityAccessControlHandler { + + /** + * {@inheritdoc} + */ + protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) { + switch ($operation) { + case 'view': + return AccessResult::allowedIf($account->hasPermission('access shortcuts'))->cachePerPermissions(); + case 'update': + if ($account->hasPermission('administer shortcuts')) { + return AccessResult::allowed()->cachePerPermissions(); + } + if (!$account->hasPermission('access shortcuts')) { + return AccessResult::neutral()->cachePerPermissions(); + } + return AccessResult::allowedIf($account->hasPermission('customize shortcut links') && $entity == shortcut_current_displayed_set($account))->cachePerPermissions()->addCacheableDependency($entity); + + case 'delete': + return AccessResult::allowedIf($account->hasPermission('administer shortcuts') && $entity->id() != 'default')->cachePerPermissions(); + + default: + // No opinion. + return AccessResult::neutral(); + } + } + + /** + * {@inheritdoc} + */ + protected function checkCreateAccess(AccountInterface $account, array $context, $entity_bundle = NULL) { + return AccessResult::allowedIfHasPermission($account, 'administer shortcuts')->orIf(AccessResult::allowedIfHasPermissions($account, ['access shortcuts', 'customize shortcut links'], 'AND')); + } + +}