protected function SubscriptionAccessControlHandler::checkFieldAccess in Mailing List 8

Default field access as determined by this access control handler.

Parameters

string $operation: The operation access should be checked for. Usually one of "view" or "edit".

\Drupal\Core\Field\FieldDefinitionInterface $field_definition: The field definition.

\Drupal\Core\Session\AccountInterface $account: The user session for which to check access.

\Drupal\Core\Field\FieldItemListInterface $items: (optional) The field values for which to check access, or NULL if access is checked for the field definition, without any specific value available. Defaults to NULL.

Return value

\Drupal\Core\Access\AccessResultInterface The access result.

Overrides EntityAccessControlHandler::checkFieldAccess

File

src/SubscriptionAccessControlHandler.php, line 71

Class

SubscriptionAccessControlHandler

Access controller for the subscription entity.

Namespace

Drupal\mailing_list

Code

protected function checkFieldAccess($operation, FieldDefinitionInterface $field_definition, AccountInterface $account, FieldItemListInterface $items = NULL) {
  if ($operation == 'edit') {

    // Only users with the administer nodes permission can edit administrative
    // fields.
    $administrative_fields = [
      'uid',
      'created',
      'status',
    ];
    if (in_array($field_definition
      ->getName(), $administrative_fields, TRUE)) {
      return AccessResult::allowedIfHasPermission($account, 'administer mailing list subscriptions');
    }
  }
  return parent::checkFieldAccess($operation, $field_definition, $account, $items);
}