QuizResultAccessControlHandler.php in Quiz 6.x

Namespace

Drupal\quiz\Access

File

src/Access/QuizResultAccessControlHandler.php

<?php

namespace Drupal\quiz\Access;

use Drupal;
use Drupal\Core\Access\AccessResultAllowed;
use Drupal\Core\Entity\EntityInterface;
use Drupal\Core\Session\AccountInterface;
use Drupal\entity\UncacheableEntityAccessControlHandler;
class QuizResultAccessControlHandler extends UncacheableEntityAccessControlHandler {

  /**
   * {@inheritdoc}
   */
  function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
    $current_user = Drupal::currentUser();
    if ($operation == 'view') {
      if ($current_user
        ->hasPermission('view results for own quiz') && $account
        ->id() == $entity
        ->getQuiz()
        ->get('uid')
        ->getString()) {

        // User can view all quiz results for a quiz they authorized.
        return AccessResultAllowed::allowed();
      }
      if ($current_user
        ->hasPermission('view own quiz_result') && $account
        ->id() == $entity
        ->get('uid')
        ->getString()) {

        // User can view their own quiz result.
        return AccessResultAllowed::allowed();
      }
    }
    if ($operation == 'update') {
      if ($current_user
        ->hasPermission('score own quiz') && $account
        ->id() == $entity
        ->getQuiz()
        ->get('uid')
        ->getString()) {

        // User can view all quiz results for a quiz they authored.
        return AccessResultAllowed::allowed();
      }
    }
    return parent::checkAccess($entity, $operation, $account);
  }

}

Classes

Name	Description
QuizResultAccessControlHandler