public function RoleAccessCheck::access

Checks access.

Parameters

\Symfony\Component\Routing\Route $route: The route to check against.

\Drupal\Core\Session\AccountInterface $account: The currently logged in account.

Return value

\Drupal\Core\Access\AccessResultInterface The access result.

File

core/modules/user/src/Access/RoleAccessCheck.php, line 30

Class

RoleAccessCheck

Determines access to routes based on roles.

Namespace

Code

public function access(Route $route, AccountInterface $account) {

  // Requirements just allow strings, so this might be a comma separated list.
  $rid_string = $route
    ->getRequirement('_role');
  $explode_and = array_filter(array_map('trim', explode(',', $rid_string)));
  if (count($explode_and) > 1) {
    $diff = array_diff($explode_and, $account
      ->getRoles());
    if (empty($diff)) {
      return AccessResult::allowed()
        ->addCacheContexts([
        'user.roles',
      ]);
    }
  }
  else {
    $explode_or = array_filter(array_map('trim', explode('+', $rid_string)));
    $intersection = array_intersect($explode_or, $account
      ->getRoles());
    if (!empty($intersection)) {
      return AccessResult::allowed()
        ->addCacheContexts([
        'user.roles',
      ]);
    }
  }

  // If there is no allowed role, give other access checks a chance.
  return AccessResult::neutral()
    ->addCacheContexts([
    'user.roles',
  ]);
}