function merci_line_item_type_access in MERCI (Manage Equipment Reservations, Checkout and Inventory) 7.3

Determines access to perform an operation on a particular line item.

Parameters

$op: The operation to perform on the line item, either 'update' or 'delete'.

$line_item: The line item object in question.

$account: The user account whose access should be checked; defaults to the current user if left NULL.

Return value

TRUE or FALSE indicating whether or not access should be granted.

1 string reference to 'merci_line_item_type_access'

merci_line_item_entity_info in merci_line_item/merci_line_item.module

Implements hook_entity_info().

File

merci_line_item/merci_line_item.module, line 437

Defines the core MERCI line item entity and API functions interact with line items.

Code

function merci_line_item_type_access($op, $line_item, $account = NULL) {
  global $user;
  $account = isset($account) ? $account : clone $user;

  // If the user has the administration permission, return TRUE now.
  if (user_access('administer merci line items', $account)) {
    return TRUE;
  }

  // For users who don't have the general administration permission, we have to
  // determine access to update or delete a given line item through a connection
  // to an Order.

  /* TODO
    if (!empty($line_item->order_id) && module_exists('commerce_order')) {
      $order = commerce_order_load($line_item->order_id);
      return commerce_order_access($op, $order, $account);
    }
     */

  // Issue a blanket refusal of access in the event the order module is not
  // enabled, as we have no other way of determining line item access outside of
  // the 'administer line items' permission.
  return FALSE;
}