autonomic-cooperative/opencase
Archived
0
0
Fork 0
Code Issues 43 Pull Requests Releases Wiki Activity

Added "own cases" permission and access check

Browse Source 
Works for when viewing a single case, not for view yet though.
This commit is contained in:
naomi
2018-07-09 13:21:52 +02:00
parent 2a31b1c8ce
commit 351bdb5afd
4 changed files with 33 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
modules/opencase_entities/src/CaseInvolvement.php Normal file
View File

@ -0,0 +1,16 @@
<?php
namespace Drupal\opencase_entities;
class CaseInvolvement {
private function getLinkedActorId($userId) {
return \Drupal\user\Entity\User::load($userId)->get('field_linked_opencase_actor')->target_id;
}
public function userIsInvolved($account, $case) {
$actorId = $this->getLinkedActorId($account->id());
$involvedIds = array_column($case->actors_involved->getValue(), 'target_id');
return in_array($actorId, $involvedIds);
}
}

7
modules/opencase_entities/src/OCCaseAccessControlHandler.php
View File

@ -6,6 +6,7 @@ use Drupal\Core\Entity\EntityAccessControlHandler;
use Drupal\Core\Entity\EntityInterface;
use Drupal\Core\Session\AccountInterface;
use Drupal\Core\Access\AccessResult;
use Drupal\opencase_entities\CaseInvolvement;
/**
* Access controller for the Case entity.
@ -24,8 +25,10 @@ class OCCaseAccessControlHandler extends EntityAccessControlHandler {
if (!$entity->isPublished()) {
return AccessResult::allowedIfHasPermission($account, 'view unpublished case entities');
}
return AccessResult::allowedIfHasPermission($account, 'view published case entities');
return AccessResult::allowedIf(
$account->hasPermission('view published case entities')
|| (new CaseInvolvement())->userIsInvolved($account, $entity)
);
case 'update':
return AccessResult::allowedIfHasPermission($account, 'edit case entities');