You are here

protected function EntityAccessControlHandlerBase::checkAccess in Entity API 8

Performs access checks.

This method is supposed to be overwritten by extending classes that do their own custom access checking.

Parameters

\Drupal\Core\Entity\EntityInterface $entity: The entity for which to check access.

string $operation: The entity operation. Usually one of 'view', 'view label', 'update' or 'delete'.

\Drupal\Core\Session\AccountInterface $account: The user for which to check access.

Return value

\Drupal\Core\Access\AccessResultInterface The access result.

Overrides EntityAccessControlHandler::checkAccess

File

src/EntityAccessControlHandlerBase.php, line 19

Class

EntityAccessControlHandlerBase
@internal

Namespace

Drupal\entity

Code

protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
  $account = $this
    ->prepareUser($account);

  /** @var \Drupal\Core\Access\AccessResult $result */
  $result = parent::checkAccess($entity, $operation, $account);
  if ($result
    ->isNeutral()) {
    if ($entity instanceof EntityOwnerInterface) {
      $result = $this
        ->checkEntityOwnerPermissions($entity, $operation, $account);
    }
    else {
      $result = $this
        ->checkEntityPermissions($entity, $operation, $account);
    }
  }

  // Ensure that access is evaluated again when the entity changes.
  return $result
    ->addCacheableDependency($entity);
}