You are here

public function GroupContentCreateAnyEntityAccessCheck::access in Group 2.0.x

Same name and namespace in other branches
  1. 8 src/Access/GroupContentCreateAnyEntityAccessCheck.php \Drupal\group\Access\GroupContentCreateAnyEntityAccessCheck::access()

Checks access for group content target entity creation routes.

All routes using this access check should have a group parameter and have the _group_content_create_any_entity_access requirement set to 'TRUE' or 'FALSE'.

Parameters

\Symfony\Component\Routing\Route $route: The route to check against.

\Drupal\Core\Session\AccountInterface $account: The currently logged in account.

\Drupal\group\Entity\GroupInterface $group: The group in which the content should be created.

Return value

\Drupal\Core\Access\AccessResultInterface The access result.

File

src/Access/GroupContentCreateAnyEntityAccessCheck.php, line 33

Class

GroupContentCreateAnyEntityAccessCheck
Determines access for group content target entity creation.

Namespace

Drupal\group\Access

Code

public function access(Route $route, AccountInterface $account, GroupInterface $group) {
  $needs_access = $route
    ->getRequirement('_group_content_create_any_entity_access') === 'TRUE';

  /** @var \Drupal\group\Plugin\Group\Relation\GroupRelationManagerInterface $plugin_manager */
  $plugin_manager = \Drupal::service('plugin.manager.group_relation');
  $plugin_ids = $plugin_manager
    ->getGroupTypePluginMap()[$group
    ->bundle()];

  // Find out which ones allow the user to create a target entity.
  foreach ($plugin_ids as $plugin_id) {
    $access_handler = $plugin_manager
      ->getAccessControlHandler($plugin_id);
    if ($access_handler
      ->entityCreateAccess($group, $account, TRUE)
      ->isAllowed()) {

      // Allow access if the route flag was set to 'TRUE'.
      return AccessResult::allowedIf($needs_access);
    }
  }

  // If we got this far, it means the user could not create any content in the
  // group. So only allow access if the route flag was set to 'FALSE'.
  return AccessResult::allowedIf(!$needs_access);
}