function jsonapi_jsonapi_shortcut_filter_access

Implements hook_jsonapi_ENTITY_TYPE_filter_access() for 'shortcut'.

File

core/modules/jsonapi/jsonapi.module, line 275

Code

function jsonapi_jsonapi_shortcut_filter_access(EntityTypeInterface $entity_type, AccountInterface $account) {
    // @see \Drupal\shortcut\ShortcutAccessControlHandler::checkAccess()
    // \Drupal\jsonapi\Access\TemporaryQueryGuard adds the condition for
    // (shortcut_set = $shortcut_set_storage->getDisplayedToUser($current_user)),
    // so this does not have to.
    return [
        JSONAPI_FILTER_AMONG_ALL => AccessResult::allowedIfHasPermission($account, 'administer shortcuts')->orIf(AccessResult::allowedIfHasPermissions($account, [
            'access shortcuts',
            'customize shortcut links',
        ])),
    ];
}