protected function JobAccessControlHandler::checkAccess

File

src/Entity/Controller/JobAccessControlHandler.php, line 20

Class

JobAccessControlHandler

Access control handler for the job entity.

Namespace

Code

protected function checkAccess(EntityInterface $entity, $operation, AccountInterface $account) {

  /** @var \Drupal\tmgmt\JobInterface $entity */
  if ($account
    ->hasPermission('administer tmgmt')) {

    // Administrators can do everything.
    return AccessResult::allowed()
      ->cachePerPermissions();
  }
  switch ($operation) {
    case 'view':
    case 'update':
      return AccessResult::allowedIfHasPermission($account, 'create translation jobs')
        ->orIf(AccessResult::allowedIfHasPermission($account, 'accept translation jobs'));
      break;
    case 'delete':
      return AccessResult::allowedIfHasPermission($account, 'delete translation jobs')
        ->andIf(AccessResult::allowedIf(!$entity
        ->isActive()))
        ->addCacheableDependency($entity);
      break;

      // Custom operations.

    // Custom operations.
    case 'submit':
      return AccessResult::allowedIfHasPermission($account, 'submit translation jobs');
      break;
    case 'accept':
      return AccessResult::allowedIfHasPermission($account, 'accept translation jobs');
      break;
    case 'abort':
    case 'resubmit':
      return AccessResult::allowedIfHasPermission($account, 'submit translation jobs');
      break;
  }
  return AccessResult::neutral();
}