public function AddToCartController::access in Commerce Add To Cart Link 8

Same name and namespace in other branches

1. 2.x src/Controller/AddToCartController.php \Drupal\commerce_add_to_cart_link\Controller\AddToCartController::access()

Access callback for the action route.

Parameters

\Drupal\commerce_product\Entity\ProductInterface $commerce_product: The product entity.

\Drupal\commerce_product\Entity\ProductVariationInterface $commerce_product_variation: The product variation to add.

string $token: The CSRF token.

Return value

\Drupal\Core\Access\AccessResultInterface The access result.

1 string reference to 'AddToCartController::access'

commerce_add_to_cart_link.routing.yml in ./commerce_add_to_cart_link.routing.yml

commerce_add_to_cart_link.routing.yml

File

src/Controller/AddToCartController.php, line 173

Class

AddToCartController

Defines the add to cart controller.

Namespace

Drupal\commerce_add_to_cart_link\Controller

Code

public function access(ProductInterface $commerce_product, ProductVariationInterface $commerce_product_variation, $token) {
  if (!$commerce_product
    ->isPublished() || !$commerce_product
    ->access('view')) {

    // If product is disabled or the user has no view access, deny.
    return AccessResult::forbidden();
  }
  if (!$commerce_product_variation
    ->isPublished() || !$commerce_product_variation
    ->access('view')) {

    // If the variation is inactive, deny.
    return AccessResult::forbidden();
  }
  if ((int) $commerce_product
    ->id() !== (int) $commerce_product_variation
    ->getProductId()) {

    // Deny, if the product ID and variation's parent product ID don't match.
    return AccessResult::forbidden();
  }
  return AccessResult::allowedIf($this->cartLinkToken
    ->validate($commerce_product_variation, $token));
}