function ShortcutSetAccessControlHandler::checkAccess

File

core/modules/shortcut/src/ShortcutSetAccessControlHandler.php, line 20

Class

ShortcutSetAccessControlHandler

Defines the access control handler for the shortcut set entity type.

Namespace

Code

protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {
  switch ($operation) {
    case 'view':
      return AccessResult::allowedIfHasPermission($account, 'access shortcuts');
    case 'update':
      if ($account->hasPermission('administer shortcuts')) {
        return AccessResult::allowed()->cachePerPermissions();
      }
      if (!$account->hasPermission('access shortcuts')) {
        return AccessResult::neutral()->cachePerPermissions();
      }
      return AccessResult::allowedIf($account->hasPermission('customize shortcut links') && $entity == shortcut_current_displayed_set($account))
        ->cachePerPermissions()
        ->addCacheableDependency($entity);
    case 'delete':
      return AccessResult::allowedIf($account->hasPermission('administer shortcuts') && $entity->id() != 'default')
        ->cachePerPermissions();
    default:
      // No opinion.
      return AccessResult::neutral();
  }
}