public NodeAccessControlHandler::access(EntityInterface $entity, $operation, AccountInterface $account = NULL, $return_as_object = FALSE)
Checks access to an operation on a given entity or entity translation.
Use \Drupal\Core\Entity\EntityAccessControlHandlerInterface::createAccess() to check access to create an entity.
Parameters
\Drupal\Core\Entity\EntityInterface $entity: The entity for which to check access.
string $operation: The operation access should be checked for. Usually one of "view", "view label", "update" or "delete".
\Drupal\Core\Session\AccountInterface $account: (optional) The user session for which to check access, or NULL to check access for the current user. Defaults to NULL.
bool $return_as_object: (optional) Defaults to FALSE.
Return value
bool|\Drupal\Core\Access\AccessResultInterface The access result. Returns a boolean if $return_as_object is FALSE (this is the default) and otherwise an AccessResultInterface object. When a boolean is returned, the result of AccessInterface::isAllowed() is returned, i.e. TRUE means access is explicitly allowed, FALSE means access is either explicitly forbidden or "no opinion".
Overrides EntityAccessControlHandler::access
File
- core/modules/node/src/NodeAccessControlHandler.php, line 57
Class
- NodeAccessControlHandler
- Defines the access control handler for the node entity type.
Namespace
Drupal\node
Code
1 2 3 4 5 6 7 8 9 10 11 12 13 14 | public function access(EntityInterface $entity , $operation , AccountInterface $account = NULL, $return_as_object = FALSE) { $account = $this ->prepareUser( $account ); if ( $account ->hasPermission( 'bypass node access' )) { $result = AccessResult::allowed()->cachePerPermissions(); return $return_as_object ? $result : $result ->isAllowed(); } if (! $account ->hasPermission( 'access content' )) { $result = AccessResult::forbidden()->cachePerPermissions(); return $return_as_object ? $result : $result ->isAllowed(); } $result = parent::access( $entity , $operation , $account , TRUE)->cachePerPermissions(); return $return_as_object ? $result : $result ->isAllowed(); } |
Please login to continue.