function hook_entity_access

Same name in other branches
  1. 9 core/lib/Drupal/Core/Entity/entity.api.php \hook_entity_access()
  2. 8.9.x core/lib/Drupal/Core/Entity/entity.api.php \hook_entity_access()
  3. 10 core/lib/Drupal/Core/Entity/entity.api.php \hook_entity_access()

Control entity operation access.

Note that this hook is not called for listings (e.g., from entity queries and Views). For nodes, see Node access rights for a full explanation. For other entity types, see hook_query_TAG_alter().

Parameters

\Drupal\Core\Entity\EntityInterface $entity: The entity to check access to.

string $operation: The operation that is to be performed on $entity. Usually one of:

  • "view"
  • "update"
  • "delete"

\Drupal\Core\Session\AccountInterface $account: The account trying to access the entity.

Return value

\Drupal\Core\Access\AccessResultInterface The access result. The final result is calculated by using \Drupal\Core\Access\AccessResultInterface::orIf() on the result of every hook_entity_access() and hook_ENTITY_TYPE_access() implementation, and the result of the entity-specific checkAccess() method in the entity access control handler. Be careful when writing generalized access checks shared between routing and entity checks: routing uses the andIf() operator. So returning an isNeutral() does not determine entity access at all but it always ends up denying access while routing.

See also

\Drupal\Core\Entity\EntityAccessControlHandler

hook_entity_create_access()

hook_ENTITY_TYPE_access()

hook_query_TAG_alter()

Related topics

1 function implements hook_entity_access()

Note: this list is generated by pattern matching, so it may include some functions that are not actually implementations of this hook.

taxonomy_test_entity_access in core/modules/taxonomy/tests/modules/taxonomy_test/taxonomy_test.module
Implements hook_entity_access().
1 invocation of hook_entity_access()
EntityAccessControlHandler::access in core/lib/Drupal/Core/Entity/EntityAccessControlHandler.php
Checks access to an operation on a given entity or entity translation.

File

core/lib/Drupal/Core/Entity/entity.api.php, line 712

Code

function hook_entity_access(\Drupal\Core\Entity\EntityInterface $entity, $operation, \Drupal\Core\Session\AccountInterface $account) {
    // No opinion.
    return AccessResult::neutral();
}

Buggy or inaccurate documentation? Please file an issue. Need support? Need help programming? Connect with the Drupal community.