protected function GroupAccessControlHandler::checkAccess in Group 8

Same name and namespace in other branches

1. 2.0.x src/Entity/Access/GroupAccessControlHandler.php \Drupal\group\Entity\Access\GroupAccessControlHandler::checkAccess()

Performs access checks.

This method is supposed to be overwritten by extending classes that do their own custom access checking.

Parameters

\Drupal\Core\Entity\EntityInterface $entity: The entity for which to check access.

string $operation: The entity operation. Usually one of 'view', 'view label', 'update' or 'delete'.

\Drupal\Core\Session\AccountInterface $account: The user for which to check access.

Return value

\Drupal\Core\Access\AccessResultInterface The access result.

Overrides EntityAccessControlHandler::checkAccess

File

src/Entity/Access/GroupAccessControlHandler.php, line 21

Class

GroupAccessControlHandler

Access controller for the Group entity.

Namespace

Drupal\group\Entity\Access

Code

protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {

  /** @var \Drupal\group\Entity\GroupInterface $entity */
  switch ($operation) {
    case 'view':
      if (!$entity
        ->isPublished()) {
        $access_result = GroupAccessResult::allowedIfHasGroupPermission($entity, $account, 'view any unpublished group');
        if (!$access_result
          ->isAllowed() && $account
          ->isAuthenticated() && $account
          ->id() === $entity
          ->getOwnerId()) {
          $access_result = GroupAccessResult::allowedIfHasGroupPermission($entity, $account, 'view own unpublished group')
            ->cachePerUser();
        }
      }
      else {
        $access_result = GroupAccessResult::allowedIfHasGroupPermission($entity, $account, 'view group');
      }

      // The access result might change if group status changes.
      return $access_result
        ->addCacheableDependency($entity);
    case 'update':
      return GroupAccessResult::allowedIfHasGroupPermission($entity, $account, 'edit group');
    case 'delete':
      return GroupAccessResult::allowedIfHasGroupPermission($entity, $account, 'delete group');
  }
  return AccessResult::neutral();
}