WishlistUserAccessCheck.php in Commerce Wishlist 8.3

Namespace

Drupal\commerce_wishlist\Access

File

src/Access/WishlistUserAccessCheck.php

<?php

namespace Drupal\commerce_wishlist\Access;

use Drupal\Core\Access\AccessResult;
use Drupal\Core\Routing\RouteMatchInterface;
use Drupal\Core\Session\AccountInterface;

/**
 * Access check for wishlist user pages (user_form and share_form routes).
 */
class WishlistUserAccessCheck {

  /**
   * Checks access to the given user's wishlist pages.
   *
   * @param \Drupal\Core\Routing\RouteMatchInterface $route_match
   *   The route match.
   * @param \Drupal\Core\Session\AccountInterface $account
   *   The currently logged in account.
   *
   * @return \Drupal\Core\Access\AccessResultInterface
   *   The access result.
   */
  public function checkAccess(RouteMatchInterface $route_match, AccountInterface $account) {
    if ($account
      ->hasPermission('administer commerce_wishlist')) {

      // Administrators can modify anyone's wishlst.
      $access = AccessResult::allowed()
        ->cachePerPermissions();
    }
    else {

      // Users can modify own wishlists.
      $user = $route_match
        ->getParameter('user');
      if ($account
        ->isAuthenticated()) {
        $access = AccessResult::allowedIf($account
          ->isAuthenticated())
          ->andIf(AccessResult::allowedIf($user
          ->id() == $account
          ->id()))
          ->cachePerUser();
      }
      else {
        $access = AccessResult::allowedIf($user
          ->id() == '0')
          ->addCacheContexts([
          'wishlist',
        ]);
      }
    }
    return $access;
  }

}

Classes

Name	Description
WishlistUserAccessCheck	Access check for wishlist user pages (user_form and share_form routes).