DomainAccessControlHandler.php in Domain Access 8
File
domain/src/DomainAccessControlHandler.php
View source
<?php
namespace Drupal\domain;
use Drupal\Core\Access\AccessResult;
use Drupal\Core\Entity\EntityAccessControlHandler;
use Drupal\Core\Entity\EntityHandlerInterface;
use Drupal\Core\Entity\EntityInterface;
use Drupal\Core\Entity\EntityTypeInterface;
use Drupal\Core\Entity\EntityTypeManagerInterface;
use Drupal\Core\Session\AccountInterface;
use Drupal\domain\DomainInterface;
use Drupal\user\UserStorageInterface;
use Symfony\Component\DependencyInjection\ContainerInterface;
class DomainAccessControlHandler extends EntityAccessControlHandler implements EntityHandlerInterface {
protected $entityTypeManager;
protected $domainElementManager;
protected $userStorage;
public function __construct(EntityTypeInterface $entity_type, EntityTypeManagerInterface $entity_type_manager, DomainElementManagerInterface $domain_element_manager, UserStorageInterface $user_storage) {
parent::__construct($entity_type);
$this->entityTypeManager = $entity_type_manager;
$this->domainElementManager = $domain_element_manager;
$this->userStorage = $user_storage;
}
public static function createInstance(ContainerInterface $container, EntityTypeInterface $entity_type) {
return new static($entity_type, $container
->get('entity_type.manager'), $container
->get('domain.element_manager'), $container
->get('entity_type.manager')
->getStorage('user'));
}
public function checkAccess(EntityInterface $entity, $operation, AccountInterface $account = NULL) {
$account = $this
->prepareUser($account);
if ($account
->hasPermission('administer domains')) {
return AccessResult::allowed();
}
$is_admin = $this
->isDomainAdmin($entity, $account);
if ($operation == 'view' && ($entity
->status() || $account
->hasPermission('access inactive domains')) && ($is_admin || $account
->hasPermission('view domain list'))) {
return AccessResult::allowed();
}
if ($operation == 'update' && $account
->hasPermission('edit assigned domains') && $is_admin) {
return AccessResult::allowed();
}
if ($operation == 'delete' && $account
->hasPermission('delete assigned domains') && $is_admin) {
return AccessResult::allowed();
}
return AccessResult::forbidden();
}
protected function checkCreateAccess(AccountInterface $account, array $context, $entity_bundle = NULL) {
if ($account
->hasPermission('administer domains') || $account
->hasPermission('create domains')) {
return AccessResult::allowed();
}
return AccessResult::neutral();
}
public function isDomainAdmin(EntityInterface $entity, AccountInterface $account) {
$user = $this->userStorage
->load($account
->id());
$user_domains = $this->domainElementManager
->getFieldValues($user, DomainInterface::DOMAIN_ADMIN_FIELD);
return isset($user_domains[$entity
->id()]);
}
}