61 lines
1.6 KiB
PHP
61 lines
1.6 KiB
PHP
<?php
|
|
|
|
namespace Drupal\opencase_entities;
|
|
|
|
use Drupal\Core\Entity\EntityAccessControlHandler;
|
|
use Drupal\Core\Entity\EntityInterface;
|
|
use Drupal\Core\Session\AccountInterface;
|
|
use Drupal\Core\Access\AccessResult;
|
|
|
|
/**
|
|
* Access controller for the Actor entity.
|
|
*
|
|
* @see \Drupal\opencase_entities\Entity\OCActor.
|
|
*/
|
|
class OCActorAccessControlHandler extends EntityAccessControlHandler {
|
|
|
|
|
|
protected $viewLabelOperation = TRUE;
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
* Permissions are assigned by bundle.
|
|
*
|
|
*/
|
|
protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
|
|
/** @var \Drupal\opencase_entities\Entity\OCActorInterface $entity */
|
|
$bundle = $entity->bundle();
|
|
switch ($operation) {
|
|
case 'view label':
|
|
return AccessResult::allowed();
|
|
|
|
case 'view':
|
|
if (!$entity->isPublished()) {
|
|
return AccessResult::allowedIf(
|
|
$account->hasPermission("view unpublished actor entities")
|
|
);
|
|
}
|
|
return AccessResult::allowedIf(
|
|
$account->hasPermission("view published $bundle entities")
|
|
);
|
|
|
|
case "update":
|
|
return AccessResult::allowedIfHasPermission($account, "edit $bundle entities");
|
|
|
|
case "delete":
|
|
return AccessResult::allowedIfHasPermission($account, "delete $bundle entities");
|
|
}
|
|
|
|
// Unknown operation, no opinion.
|
|
return AccessResult::neutral();
|
|
}
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
protected function checkCreateAccess(AccountInterface $account, array $context, $entity_bundle = NULL) {
|
|
return AccessResult::allowedIfHasPermission($account, "add $entity_bundle entities");
|
|
}
|
|
|
|
}
|