function ShortcutSetAccessControlHandler::checkAccess

Overrides EntityAccessControlHandler::checkAccess

File

core/modules/shortcut/src/ShortcutSetAccessControlHandler.php, line 46

Class

ShortcutSetAccessControlHandler

Defines the access control handler for the shortcut set entity type.

Namespace

Code

protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
    switch ($operation) {
        case 'view':
            return AccessResult::allowedIfHasPermission($account, 'access shortcuts');
        case 'update':
            if ($account->hasPermission('administer shortcuts')) {
                return AccessResult::allowed()->cachePerPermissions();
            }
            if (!$account->hasPermission('access shortcuts')) {
                return AccessResult::neutral()->cachePerPermissions();
            }
            $shortcut_set_storage = $this->entityTypeManager
                ->getStorage('shortcut_set');
            return AccessResult::allowedIf($account->hasPermission('customize shortcut links') && $entity == $shortcut_set_storage->getDisplayedToUser($account))
                ->cachePerPermissions()
                ->addCacheableDependency($entity);
        case 'delete':
            return AccessResult::allowedIf($account->hasPermission('administer shortcuts') && $entity->id() != 'default')
                ->cachePerPermissions();
        default:
            // No opinion.
            return AccessResult::neutral();
    }
}