UserRolesAccessPolicy.php

<?php

declare (strict_types=1);
namespace Drupal\Core\Session;

use Drupal\Core\Entity\EntityTypeManagerInterface;

/**
 * Grants permissions based on a user's roles.
 */
final class UserRolesAccessPolicy extends AccessPolicyBase {
  public function __construct(protected EntityTypeManagerInterface $entityTypeManager) {
  }
  
  /**
   * {@inheritdoc}
   */
  public function calculatePermissions(AccountInterface $account, string $scope) : RefinableCalculatedPermissionsInterface {
    $calculated_permissions = parent::calculatePermissions($account, $scope);
    /** @var \Drupal\user\RoleInterface[] $user_roles */
    $user_roles = $this->entityTypeManager
      ->getStorage('user_role')
      ->loadMultiple($account->getRoles());
    foreach ($user_roles as $user_role) {
      $calculated_permissions->addItem(new CalculatedPermissionsItem($user_role->getPermissions(), $user_role->isAdmin()))
        ->addCacheableDependency($user_role);
    }
    return $calculated_permissions;
  }
  
  /**
   * {@inheritdoc}
   */
  public function getPersistentCacheContexts() : array {
    return [
      'user.roles',
    ];
  }

}