2018-04-29 11:58:46 +00:00
|
|
|
<?php
|
|
|
|
|
|
|
|
namespace Drupal\opencase_entities;
|
|
|
|
|
|
|
|
use Drupal\Core\Entity\EntityAccessControlHandler;
|
|
|
|
use Drupal\Core\Entity\EntityInterface;
|
|
|
|
use Drupal\Core\Session\AccountInterface;
|
|
|
|
use Drupal\Core\Access\AccessResult;
|
2018-07-09 11:21:52 +00:00
|
|
|
use Drupal\opencase_entities\CaseInvolvement;
|
2018-04-29 11:58:46 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Access controller for the Case entity.
|
|
|
|
*
|
|
|
|
* @see \Drupal\opencase_entities\Entity\OCCase.
|
|
|
|
*/
|
|
|
|
class OCCaseAccessControlHandler extends EntityAccessControlHandler {
|
|
|
|
|
|
|
|
/**
|
|
|
|
* {@inheritdoc}
|
|
|
|
*/
|
|
|
|
protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
|
|
|
|
/** @var \Drupal\opencase_entities\Entity\OCCaseInterface $entity */
|
|
|
|
switch ($operation) {
|
|
|
|
case 'view':
|
|
|
|
if (!$entity->isPublished()) {
|
|
|
|
return AccessResult::allowedIfHasPermission($account, 'view unpublished case entities');
|
|
|
|
}
|
2018-07-09 11:21:52 +00:00
|
|
|
return AccessResult::allowedIf(
|
|
|
|
$account->hasPermission('view published case entities')
|
2018-07-09 17:36:47 +00:00
|
|
|
|| CaseInvolvement::userIsInvolved($account, $entity)
|
2018-07-09 11:21:52 +00:00
|
|
|
);
|
2018-07-19 13:10:02 +00:00
|
|
|
case 'update': // you can edit the case only if a) you can see it and b) you have the permission to edit cases.
|
2018-07-09 18:26:11 +00:00
|
|
|
return AccessResult::allowedIf(
|
2018-07-19 13:10:02 +00:00
|
|
|
$account->hasPermission('edit case entities')
|
|
|
|
&& ($account->hasPermission('view published case entities') || CaseInvolvement::userIsInvolved($account, $entity))
|
2018-07-09 18:26:11 +00:00
|
|
|
);
|
2018-04-29 11:58:46 +00:00
|
|
|
case 'delete':
|
|
|
|
return AccessResult::allowedIfHasPermission($account, 'delete case entities');
|
|
|
|
}
|
|
|
|
|
|
|
|
// Unknown operation, no opinion.
|
|
|
|
return AccessResult::neutral();
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* {@inheritdoc}
|
|
|
|
*/
|
|
|
|
protected function checkCreateAccess(AccountInterface $account, array $context, $entity_bundle = NULL) {
|
|
|
|
return AccessResult::allowedIfHasPermission($account, 'add case entities');
|
|
|
|
}
|
|
|
|
|
|
|
|
}
|