ConnectionAccessControlHandler.php in RedHen CRM 8

Namespace

Drupal\redhen_connection

File

modules/redhen_connection/src/ConnectionAccessControlHandler.php

<?php

namespace Drupal\redhen_connection;

use Drupal\Core\Entity\EntityAccessControlHandler;
use Drupal\Core\Entity\EntityInterface;
use Drupal\Core\Session\AccountInterface;
use Drupal\Core\Access\AccessResult;

/**
 * Access controller for the Connection entity.
 *
 * @see \Drupal\redhen_connection\Entity\Connection.
 */
class ConnectionAccessControlHandler extends EntityAccessControlHandler {

  /**
   * {@inheritdoc}
   */
  protected $viewLabelOperation = TRUE;

  /**
   * {@inheritdoc}
   */
  protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {

    /** @var \Drupal\redhen_connection\ConnectionInterface $entity */

    // Get Connection bundle.
    $entity_bundle = $entity
      ->getType();
    switch ($operation) {

      // @todo split out view label into its own permission.
      case 'view label':
      case 'view':

        // If Connection is active, check "view active" permissions to determine
        // access.
        if ($entity
          ->isActive()) {
          $view_access = AccessResult::allowedIfHasPermissions($account, [
            'view active connection entities',
            'view active ' . $entity_bundle . ' connection',
          ], 'OR');
        }
        else {
          $view_access = AccessResult::allowedIfHasPermissions($account, [
            'view inactive connection entities',
            'view inactive ' . $entity_bundle . ' connection',
          ], 'OR');
        }
        return $view_access;
      case 'update':

        // Check admin and bundle-specific edit permissions to determine
        // edit access.
        $edit_access = AccessResult::allowedIfHasPermissions($account, [
          'edit connection entities',
          'edit ' . $entity_bundle . ' connection',
        ], 'OR');
        return $edit_access;
      case 'delete':

        // Check admin and bundle-specific delete permissions to determine
        // delete access.
        $delete_access = AccessResult::allowedIfHasPermissions($account, [
          'delete connection entities',
          'delete ' . $entity_bundle . ' connection',
        ], 'OR');
        return $delete_access;
    }

    // Unknown operation, no opinion.
    return AccessResult::neutral();
  }

  /**
   * {@inheritdoc}
   */
  protected function checkCreateAccess(AccountInterface $account, array $context, $entity_bundle = NULL) {

    // If there is only one redhen_connection bundle, set $entity_bundle to it
    // since ConnectionAddController::add returns the add form for the solitary
    // bundle instead of a bundle select form if there is only one.
    if (!$entity_bundle) {
      $types = \Drupal::entityTypeManager()
        ->getStorage('redhen_connection_type')
        ->loadMultiple();
      if ($types && count($types) == 1) {
        $entity_bundle = array_keys($types)[0];
      }
    }
    return AccessResult::allowedIfHasPermissions($account, [
      'add connection entities',
      'add ' . $entity_bundle . ' connection',
    ], 'OR');
  }

}

Classes

Name	Description
ConnectionAccessControlHandler	Access controller for the Connection entity.