You are here

function jsonapi_jsonapi_user_filter_access in Drupal 9

Same name and namespace in other branches
  1. 8 core/modules/jsonapi/jsonapi.module \jsonapi_jsonapi_user_filter_access()
  2. 10 core/modules/jsonapi/jsonapi.module \jsonapi_jsonapi_user_filter_access()

Implements hook_jsonapi_ENTITY_TYPE_filter_access() for 'user'.

File

core/modules/jsonapi/jsonapi.module, line 309
Module implementation file.

Code

function jsonapi_jsonapi_user_filter_access(EntityTypeInterface $entity_type, AccountInterface $account) {

  // @see \Drupal\user\UserAccessControlHandler::checkAccess()
  // \Drupal\jsonapi\Access\TemporaryQueryGuard adds the condition for
  // (!isAnonymous()), so this does not have to.
  return [
    JSONAPI_FILTER_AMONG_OWN => AccessResult::allowed(),
    JSONAPI_FILTER_AMONG_ENABLED => AccessResult::allowedIfHasPermission($account, 'access user profiles'),
  ];
}