class ProductVariationCollectionAccessCheck in Commerce Core 8.2

Defines an access checker for the product variation collection route.

Takes the product variation type ID from the product type, since a product is always present in variation routes.

Hierarchy

• class \Drupal\commerce_product\Access\ProductVariationCollectionAccessCheck implements AccessInterface

1 string reference to 'ProductVariationCollectionAccessCheck'

commerce_product.services.yml in modules/product/commerce_product.services.yml

modules/product/commerce_product.services.yml

1 service uses ProductVariationCollectionAccessCheck

access_check.product_variation_collection in modules/product/commerce_product.services.yml

Drupal\commerce_product\Access\ProductVariationCollectionAccessCheck

File

modules/product/src/Access/ProductVariationCollectionAccessCheck.php, line 18

Namespace

Drupal\commerce_product\Access

class ProductVariationCollectionAccessCheck implements AccessInterface {

  /**
   * The entity type manager.
   *
   * @var \Drupal\Core\Entity\EntityTypeManagerInterface
   */
  protected $entityTypeManager;

  /**
   * Constructs a new ProductVariationCollectionAccessCheck object.
   *
   * @param \Drupal\Core\Entity\EntityTypeManagerInterface $entity_type_manager
   *   The entity type manager.
   */
  public function __construct(EntityTypeManagerInterface $entity_type_manager) {
    $this->entityTypeManager = $entity_type_manager;
  }

  /**
   * Checks access to the product variation collection.
   *
   * @param \Symfony\Component\Routing\Route $route
   *   The route to check against.
   * @param \Drupal\Core\Routing\RouteMatchInterface $route_match
   *   The route match.
   * @param \Drupal\Core\Session\AccountInterface $account
   *   The currently logged in account.
   *
   * @return \Drupal\Core\Access\AccessResultInterface
   *   The access result.
   */
  public function access(Route $route, RouteMatchInterface $route_match, AccountInterface $account) {

    /** @var \Drupal\commerce_product\Entity\ProductInterface $product */
    $product = $route_match
      ->getParameter('commerce_product');
    if (!$product) {
      return AccessResult::forbidden();
    }
    $product_type_storage = $this->entityTypeManager
      ->getStorage('commerce_product_type');

    /** @var \Drupal\commerce_product\Entity\ProductTypeInterface $product_type */
    $product_type = $product_type_storage
      ->load($product
      ->bundle());
    if (!$product_type
      ->allowsMultipleVariations()) {

      // Product types that don't allow multiple variations do not need
      // a product variation collection route.
      return AccessResult::forbidden()
        ->addCacheableDependency($product_type);
    }
    $variation_type_id = $product_type
      ->getVariationTypeId();

    // The collection route can be accessed by users with the administer
    // or manage permissions, because those permissions grant full access
    // to variations (add/edit/delete). The route can also be accessed by
    // users with the "access overview" permission, allowing both product and
    // variation listings to be viewed even if no other operations are allowed.
    $permissions = [
      'administer commerce_product',
      'access commerce_product overview',
      "manage {$variation_type_id} commerce_product_variation",
    ];
    return AccessResult::allowedIfHasPermissions($account, $permissions, 'OR');
  }

}

Members

Name	Modifiers	Type	Description	Overrides
ProductVariationCollectionAccessCheck::$entityTypeManager	protected	property	The entity type manager.
ProductVariationCollectionAccessCheck::access	public	function	Checks access to the product variation collection.
ProductVariationCollectionAccessCheck::__construct	public	function	Constructs a new ProductVariationCollectionAccessCheck object.