class ContentModerationStateAccessControlHandler

class ContentModerationStateAccessControlHandler extends EntityAccessControlHandler {
  
  /**
   * {@inheritdoc}
   */
  public function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
    // ContentModerationState is an internal entity type. Access is denied for
    // viewing, updating, and deleting. In order to update an entity's
    // moderation state use its moderation_state field.
    return AccessResult::forbidden('ContentModerationState is an internal entity type.');
  }
  
  /**
   * {@inheritdoc}
   */
  protected function checkCreateAccess(AccountInterface $account, array $context, $entity_bundle = NULL) {
    // ContentModerationState is an internal entity type. Access is denied for
    // creating. In order to update an entity's moderation state use its
    // moderation_state field.
    return AccessResult::forbidden('ContentModerationState is an internal entity type.');
  }

}