class WishlistUserAccessCheck in Commerce Wishlist 8.3

Access check for wishlist user pages (user_form and share_form routes).

Hierarchy

• class \Drupal\commerce_wishlist\Access\WishlistUserAccessCheck

1 file declares its use of WishlistUserAccessCheck

WishlistRouteProvider.php in src/WishlistRouteProvider.php

File

src/Access/WishlistUserAccessCheck.php, line 12

Namespace

Drupal\commerce_wishlist\Access

class WishlistUserAccessCheck {

  /**
   * Checks access to the given user's wishlist pages.
   *
   * @param \Drupal\Core\Routing\RouteMatchInterface $route_match
   *   The route match.
   * @param \Drupal\Core\Session\AccountInterface $account
   *   The currently logged in account.
   *
   * @return \Drupal\Core\Access\AccessResultInterface
   *   The access result.
   */
  public function checkAccess(RouteMatchInterface $route_match, AccountInterface $account) {
    if ($account
      ->hasPermission('administer commerce_wishlist')) {

      // Administrators can modify anyone's wishlst.
      $access = AccessResult::allowed()
        ->cachePerPermissions();
    }
    else {

      // Users can modify own wishlists.
      $user = $route_match
        ->getParameter('user');
      if ($account
        ->isAuthenticated()) {
        $access = AccessResult::allowedIf($account
          ->isAuthenticated())
          ->andIf(AccessResult::allowedIf($user
          ->id() == $account
          ->id()))
          ->cachePerUser();
      }
      else {
        $access = AccessResult::allowedIf($user
          ->id() == '0')
          ->addCacheContexts([
          'wishlist',
        ]);
      }
    }
    return $access;
  }

}

Members

Name	Modifiers	Type	Description	Overrides
WishlistUserAccessCheck::checkAccess	public	function	Checks access to the given user's wishlist pages.