function site_settings_type_permissions_site_setting_entity_access in Site Settings and Labels 8

Implements hook_ENTITY_TYPE_access() for entity type "site_setting_entity".

File

modules/site_settings_type_permissions/site_settings_type_permissions.module, line 34

Contains site_settings_type_permissions.module.

Code

function site_settings_type_permissions_site_setting_entity_access(SiteSettingEntityInterface $entity, $operation, AccountInterface $account) {
  $permissions =& drupal_static(__FUNCTION__, []);
  if (!in_array($operation, [
    'view',
    'update',
    'delete',
  ], TRUE)) {

    // If there was no type to check against, or the $op was not one of the
    // supported ones, we return access denied.
    return AccessResult::neutral();
  }

  // Set static cache id to use the type machine name.
  $type = $entity
    ->getType();

  // Set static cache entity published state.
  $published = $entity
    ->isPublished() ? 1 : 0;

  // If we've already checked access for this type, user and op, return from
  // cache.
  if ('view' === $operation) {
    if (isset($permissions[$account
      ->id()][$type][$operation][$published])) {
      return $permissions[$account
        ->id()][$type][$operation][$published];
    }
  }
  elseif (isset($permissions[$account
    ->id()][$type][$operation])) {
    return $permissions[$account
      ->id()][$type][$operation];
  }

  // If the current user has access to this type/operation, return access
  // allowed, forbidden otherwise.
  switch ($operation) {
    case 'view':
      if ($account
        ->hasPermission('view unpublished site setting entities') || $account
        ->hasPermission('view unpublished ' . $type . ' site setting entities')) {
        $permissions[$account
          ->id()][$type][$operation][0] = AccessResult::allowed()
          ->cachePerPermissions();
      }
      else {
        $permissions[$account
          ->id()][$type][$operation][0] = AccessResult::forbidden()
          ->cachePerPermissions();
      }
      if ($account
        ->hasPermission('view published site setting entities') || $account
        ->hasPermission('view published ' . $type . ' site setting entities')) {
        $permissions[$account
          ->id()][$type][$operation][1] = AccessResult::allowed()
          ->cachePerPermissions();
      }
      else {
        $permissions[$account
          ->id()][$type][$operation][1] = AccessResult::forbidden()
          ->cachePerPermissions();
      }
      break;
    case 'update':
      if ($account
        ->hasPermission('edit site setting entities') || $account
        ->hasPermission('edit ' . $type . ' site setting')) {
        $permissions[$account
          ->id()][$type][$operation] = AccessResult::allowed()
          ->cachePerPermissions();
      }
      else {
        $permissions[$account
          ->id()][$type][$operation] = AccessResult::forbidden()
          ->cachePerPermissions();
      }
      break;
    case 'delete':
      if ($account
        ->hasPermission('delete site setting entities') || $account
        ->hasPermission('delete ' . $type . ' site setting')) {
        $permissions[$account
          ->id()][$type][$operation] = AccessResult::allowed()
          ->cachePerPermissions();
      }
      else {
        $permissions[$account
          ->id()][$type][$operation] = AccessResult::forbidden()
          ->cachePerPermissions();
      }
      break;
  }
  if ('view' === $operation) {
    return $permissions[$account
      ->id()][$type][$operation][$published];
  }
  return $permissions[$account
    ->id()][$type][$operation];
}