AdminAccountSwitcher.php

<?php

declare (strict_types=1);
namespace Drupal\Core\DefaultContent;

use Drupal\Core\Access\AccessException;
use Drupal\Core\Entity\EntityTypeManagerInterface;
use Drupal\Core\Session\AccountInterface;
use Drupal\Core\Session\AccountSwitcherInterface;

/**
 * @internal
 *   This API is experimental.
 */
final class AdminAccountSwitcher implements AccountSwitcherInterface {
  public function __construct(private readonly AccountSwitcherInterface $decorated, private readonly EntityTypeManagerInterface $entityTypeManager, private readonly bool $isSuperUserAccessEnabled) {
  }
  
  /**
   * Switches to an administrative account.
   *
   * This will switch to the first available account with a role that has the
   * `is_admin` flag. If there are no such roles, or no such users, this will
   * try to switch to user 1 if superuser access is enabled.
   *
   * @return \Drupal\Core\Session\AccountInterface
   *   The account that was switched to.
   *
   * @throws \Drupal\Core\Access\AccessException
   *   Thrown if there are no users with administrative roles.
   */
  public function switchToAdministrator() : AccountInterface {
    $admin_roles = $this->entityTypeManager
      ->getStorage('user_role')
      ->getQuery()
      ->condition('is_admin', TRUE)
      ->execute();
    $user_storage = $this->entityTypeManager
      ->getStorage('user');
    if ($admin_roles) {
      $accounts = $user_storage->getQuery()
        ->accessCheck(FALSE)
        ->condition('roles', $admin_roles, 'IN')
        ->condition('status', 1)
        ->sort('uid')
        ->range(0, 1)
        ->execute();
    }
    else {
      $accounts = [];
    }
    $account = $user_storage->load(reset($accounts) ?: 1);
    assert($account instanceof AccountInterface);
    if (array_intersect($account->getRoles(), $admin_roles) || (int) $account->id() === 1 && $this->isSuperUserAccessEnabled) {
      $this->switchTo($account);
      return $account;
    }
    throw new AccessException("There are no user accounts with administrative roles.");
  }
  
  /**
   * {@inheritdoc}
   */
  public function switchTo(AccountInterface $account) : AccountSwitcherInterface {
    $this->decorated
      ->switchTo($account);
    return $this;
  }
  
  /**
   * {@inheritdoc}
   */
  public function switchBack() : AccountSwitcherInterface {
    $this->decorated
      ->switchBack();
    return $this;
  }

}