protected function RngContactAccessControl::checkAccess in RNG Contact 8

Performs access checks.

This method is supposed to be overwritten by extending classes that do their own custom access checking.

Parameters

\Drupal\Core\Entity\EntityInterface $entity: The entity for which to check access.

string $operation: The entity operation. Usually one of 'view', 'view label', 'update' or 'delete'.

\Drupal\Core\Session\AccountInterface $account: The user for which to check access.

Return value

\Drupal\Core\Access\AccessResultInterface The access result.

Overrides EntityAccessControlHandler::checkAccess

File

src/AccessControl/RngContactAccessControl.php, line 18

Class

RngContactAccessControl

Access controller for rng_contact entity.

Namespace

Drupal\rng_contact\AccessControl

Code

protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {

  /** @var \Drupal\rng_contact\Entity\RngContactInterface $entity */
  $account = $this
    ->prepareUser($account);
  $type = $entity
    ->bundle();
  if (in_array($operation, [
    'view',
    'update',
    'delete',
  ])) {
    if ($account
      ->hasPermission("{$operation} any {$type} rng_contact")) {
      return AccessResult::allowed()
        ->cachePerPermissions();
    }
    if ($owner = $entity
      ->getOwner()) {
      if ($account
        ->id() === $owner
        ->id() && $account
        ->hasPermission("{$operation} own {$type} rng_contact")) {
        return AccessResult::allowed()
          ->cachePerPermissions();
      }
    }
  }
  return AccessResult::neutral();
}