public function DefaultMenuLinkTreeManipulators::checkNodeAccess

Performs access checking for nodes in an optimized way.

This manipulator should be added before the generic ::checkAccess() one, because it provides a performance optimization for ::checkAccess().

Parameters

\Drupal\Core\Menu\MenuLinkTreeElement[] $tree: The menu link tree to manipulate.

Return value

\Drupal\Core\Menu\MenuLinkTreeElement[] The manipulated menu link tree.

File

core/lib/Drupal/Core/Menu/DefaultMenuLinkTreeManipulators.php, line 147

Class

DefaultMenuLinkTreeManipulators

Provides a couple of menu link tree manipulators.

Namespace

Code

public function checkNodeAccess(array $tree) {
  $node_links = [];
  $this
    ->collectNodeLinks($tree, $node_links);
  if ($node_links) {
    $nids = array_keys($node_links);
    $query = $this->entityTypeManager
      ->getStorage('node')
      ->getQuery();
    $query
      ->accessCheck(TRUE);
    $query
      ->condition('nid', $nids, 'IN');

    // Allows admins to view all nodes, by both disabling node_access
    // query rewrite as well as not checking for the node status. The
    // 'view own unpublished nodes' permission is ignored to not require cache
    // entries per user.
    $access_result = AccessResult::allowed()
      ->cachePerPermissions();
    if ($this->account
      ->hasPermission('bypass node access')) {
      $query
        ->accessCheck(FALSE);
    }
    else {
      $access_result
        ->addCacheContexts([
        'user.node_grants:view',
      ]);
      if (!$this->moduleHandler
        ->hasImplementations('node_grants') && !$this->account
        ->hasPermission('view any unpublished content')) {
        $query
          ->condition('status', NodeInterface::PUBLISHED);
      }
    }
    $nids = $query
      ->execute();
    foreach ($nids as $nid) {
      foreach ($node_links[$nid] as $key => $link) {
        $node_links[$nid][$key]->access = $access_result;
      }
    }
  }
  return $tree;
}