UserRolesAccessPolicy.php

<?php

declare (strict_types=1);
namespace Drupal\Core\Session;

use Drupal\Core\Entity\EntityTypeManagerInterface;

/**
 * Grants permissions based on a user's roles.
 */
final class UserRolesAccessPolicy extends AccessPolicyBase {
    public function __construct(EntityTypeManagerInterface $entityTypeManager) {
    }
    
    /**
     * {@inheritdoc}
     */
    public function calculatePermissions(AccountInterface $account, string $scope) : RefinableCalculatedPermissionsInterface {
        $calculated_permissions = parent::calculatePermissions($account, $scope);
        
        /** @var \Drupal\user\RoleInterface[] $user_roles */
        $user_roles = $this->entityTypeManager
            ->getStorage('user_role')
            ->loadMultiple($account->getRoles());
        foreach ($user_roles as $user_role) {
            $calculated_permissions->addItem(new CalculatedPermissionsItem($user_role->getPermissions(), $user_role->isAdmin()))
                ->addCacheableDependency($user_role);
        }
        return $calculated_permissions;
    }
    
    /**
     * {@inheritdoc}
     */
    public function getPersistentCacheContexts() : array {
        return [
            'user.roles',
        ];
    }

}