ShortcutSetAccessControlHandler.php

Same filename in other branches
  1. 8.9.x core/modules/shortcut/src/ShortcutSetAccessControlHandler.php
  2. 10 core/modules/shortcut/src/ShortcutSetAccessControlHandler.php
  3. 11.x core/modules/shortcut/src/ShortcutSetAccessControlHandler.php

Namespace

Drupal\shortcut

File

core/modules/shortcut/src/ShortcutSetAccessControlHandler.php

View source
<?php

namespace Drupal\shortcut;

use Drupal\Core\Access\AccessResult;
use Drupal\Core\Entity\EntityInterface;
use Drupal\Core\Entity\EntityAccessControlHandler;
use Drupal\Core\Session\AccountInterface;

/**
 * Defines the access control handler for the shortcut set entity type.
 *
 * @see \Drupal\shortcut\Entity\ShortcutSet
 */
class ShortcutSetAccessControlHandler extends EntityAccessControlHandler {
    
    /**
     * {@inheritdoc}
     */
    protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
        switch ($operation) {
            case 'view':
                return AccessResult::allowedIfHasPermission($account, 'access shortcuts');
            case 'update':
                if ($account->hasPermission('administer shortcuts')) {
                    return AccessResult::allowed()->cachePerPermissions();
                }
                if (!$account->hasPermission('access shortcuts')) {
                    return AccessResult::neutral()->cachePerPermissions();
                }
                return AccessResult::allowedIf($account->hasPermission('customize shortcut links') && $entity == shortcut_current_displayed_set($account))
                    ->cachePerPermissions()
                    ->addCacheableDependency($entity);
            case 'delete':
                return AccessResult::allowedIf($account->hasPermission('administer shortcuts') && $entity->id() != 'default')
                    ->cachePerPermissions();
            default:
                // No opinion.
                return AccessResult::neutral();
        }
    }
    
    /**
     * {@inheritdoc}
     */
    protected function checkCreateAccess(AccountInterface $account, array $context, $entity_bundle = NULL) {
        return AccessResult::allowedIfHasPermission($account, 'administer shortcuts')->orIf(AccessResult::allowedIfHasPermissions($account, [
            'access shortcuts',
            'customize shortcut links',
        ], 'AND'));
    }

}

Classes

Title Deprecated Summary
ShortcutSetAccessControlHandler Defines the access control handler for the shortcut set entity type.

Buggy or inaccurate documentation? Please file an issue. Need support? Need help programming? Connect with the Drupal community.