Chris@0: <?php
Chris@0: 
Chris@0: namespace Drupal\migrate_drupal_ui;
Chris@0: 
Chris@0: use Drupal\Core\Access\AccessResultAllowed;
Chris@0: use Drupal\Core\Session\AccountInterface;
Chris@0: 
Chris@0: /**
Chris@0:  * Checks access for migrate_drupal_ui routes.
Chris@0:  *
Chris@0:  * The Migrate Drupal UI can only be used by user 1. This is because any other
Chris@0:  * user might have different permissions on the source and target site.
Chris@0:  *
Chris@0:  * This class is designed to be used with '_custom_access' route requirement.
Chris@0:  *
Chris@0:  * @see \Drupal\Core\Access\CustomAccessCheck
Chris@0:  */
Chris@0: class MigrateAccessCheck {
Chris@0: 
Chris@0:   /**
Chris@0:    * Checks if the user is user 1 and grants access if so.
Chris@0:    *
Chris@0:    * @param \Drupal\Core\Session\AccountInterface $account
Chris@0:    *   The current user account.
Chris@0:    *
Chris@0:    * @return \Drupal\Core\Access\AccessResult
Chris@0:    *   The access result.
Chris@0:    */
Chris@0:   public function checkAccess(AccountInterface $account) {
Chris@0:     // The access result is uncacheable because it is just limiting access to
Chris@0:     // the migrate UI which is not worth caching.
Chris@0:     return AccessResultAllowed::allowedIf((int) $account->id() === 1)->mergeCacheMaxAge(0);
Chris@0:   }
Chris@0: 
Chris@0: }