MenuLinkContentAccessControlHandler.php in Drupal 9
File
core/modules/menu_link_content/src/MenuLinkContentAccessControlHandler.php
View source
<?php
namespace Drupal\menu_link_content;
use Drupal\Core\Access\AccessResult;
use Drupal\Core\Access\AccessManagerInterface;
use Drupal\Core\Entity\EntityAccessControlHandler;
use Drupal\Core\Entity\EntityHandlerInterface;
use Drupal\Core\Entity\EntityInterface;
use Drupal\Core\Entity\EntityTypeInterface;
use Drupal\Core\Session\AccountInterface;
use Symfony\Component\DependencyInjection\ContainerInterface;
class MenuLinkContentAccessControlHandler extends EntityAccessControlHandler implements EntityHandlerInterface {
protected $accessManager;
public function __construct(EntityTypeInterface $entity_type, AccessManagerInterface $access_manager) {
parent::__construct($entity_type);
$this->accessManager = $access_manager;
}
public static function createInstance(ContainerInterface $container, EntityTypeInterface $entity_type) {
return new static($entity_type, $container
->get('access_manager'));
}
protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
switch ($operation) {
case 'view':
return AccessResult::allowedIfHasPermission($account, 'administer menu');
case 'update':
if (!$account
->hasPermission('administer menu')) {
return AccessResult::neutral("The 'administer menu' permission is required.")
->cachePerPermissions();
}
else {
$access = AccessResult::allowed()
->cachePerPermissions()
->addCacheableDependency($entity);
if (!$account
->hasPermission('link to any page') && ($url_object = $entity
->getUrlObject()) && $url_object
->isRouted()) {
$link_access = $this->accessManager
->checkNamedRoute($url_object
->getRouteName(), $url_object
->getRouteParameters(), $account, TRUE);
$access = $access
->andIf($link_access);
}
return $access;
}
case 'delete':
return AccessResult::allowedIfHasPermission($account, 'administer menu')
->andIf(AccessResult::allowedIf(!$entity
->isNew())
->addCacheableDependency($entity));
default:
return parent::checkAccess($entity, $operation, $account);
}
}
}