Chris@0: <?php
Chris@0: 
Chris@0: namespace Drupal\user\Access;
Chris@0: 
Chris@0: use Drupal\Core\Access\AccessResult;
Chris@0: use Drupal\Core\Routing\Access\AccessInterface;
Chris@0: use Drupal\Core\Session\AccountInterface;
Chris@0: use Symfony\Component\Routing\Route;
Chris@0: 
Chris@0: /**
Chris@0:  * Determines access to routes based on permissions defined via
Chris@0:  * $module.permissions.yml files.
Chris@0:  */
Chris@0: class PermissionAccessCheck implements AccessInterface {
Chris@0: 
Chris@0:   /**
Chris@0:    * Checks access.
Chris@0:    *
Chris@0:    * @param \Symfony\Component\Routing\Route $route
Chris@0:    *   The route to check against.
Chris@0:    * @param \Drupal\Core\Session\AccountInterface $account
Chris@0:    *   The currently logged in account.
Chris@0:    *
Chris@0:    * @return \Drupal\Core\Access\AccessResultInterface
Chris@0:    *   The access result.
Chris@0:    */
Chris@0:   public function access(Route $route, AccountInterface $account) {
Chris@0:     $permission = $route->getRequirement('_permission');
Chris@0: 
Chris@0:     if ($permission === NULL) {
Chris@0:       return AccessResult::neutral();
Chris@0:     }
Chris@0: 
Chris@0:     // Allow to conjunct the permissions with OR ('+') or AND (',').
Chris@0:     $split = explode(',', $permission);
Chris@0:     if (count($split) > 1) {
Chris@0:       return AccessResult::allowedIfHasPermissions($account, $split, 'AND');
Chris@0:     }
Chris@0:     else {
Chris@0:       $split = explode('+', $permission);
Chris@0:       return AccessResult::allowedIfHasPermissions($account, $split, 'OR');
Chris@0:     }
Chris@0:   }
Chris@0: 
Chris@0: }