ParagraphAccessCheck.php

Go to the documentation of this file.

<?php

namespace Drupal\paragraphs_editor\Access;

use Drupal\Core\Access\AccessResult;
use Drupal\Core\Routing\Access\AccessInterface;
use Drupal\Core\Routing\RouteMatchInterface;
use Drupal\Core\Session\AccountInterface;
use Drupal\paragraphs_editor\EditBuffer\EditBufferItemFactoryInterface;
use Symfony\Component\Routing\Route;

/**
 * An access check handler for checking access to an editor paragraph.
 */
class ParagraphAccessCheck implements AccessInterface {

  protected $itemFactory;

  /**
   * The key used by the routing requirement.
   *
   * @var string
   */
  protected $requirementsKey = '_paragraphs_editor_access_paragraph';

  /**
   * Creates a paragraph access check object.
   *
   * @param \Drupal\paragraphs_editor\EditBuffer\EditBufferItemFactoryInterface $item_factory
   *   The factory to use for looking up edit buffer items.
   */
  public function __construct(EditBufferItemFactoryInterface $item_factory) {
    $this->itemFactory = $item_factory;
  }

  /**
   * Determines if the user has access to edit a paragraph item.
   *
   * A user has access to edit a paragraph item if the paragraph item can be
   * located within the editor context and the user has access to the editor
   * context.
   *
   * @param \Symfony\Component\Routing\Route $route
   *   The route the user is attempting to access.
   * @param \Drupal\Core\Routing\RouteMatchInterface $route_match
   *   The route match for the route the user is attempting to access.
   * @param \Drupal\Core\Session\AccountInterface $account
   *   The account to check access against.
   *
   * @return \Drupal\Core\Access\AccessResultInterface
   *   The access result for the user.
   */
  public function access(Route $route, RouteMatchInterface $route_match, AccountInterface $account) {
    list($context_param_name, $paragraph_param_name) = explode(':', $route->getRequirement($this->requirementsKey) . ':');

    // Load the context from the parameters.
    $context = ContextAccessCheck::extractContext($route_match, $context_param_name);
    if (empty($context)) {
      return AccessResult::forbidden();
    }

    // Load the paragraph uuid from the parameters.
    if (preg_match('/\{(.*)\}$/', $paragraph_param_name, $matches)) {
      $paragraph_uuid = $route_match->getParameter($matches[1]);
    }
    else {
      $paragraph_uuid = $paragraph_param_name;
    }

    // If the paragraph item cannot be located we treat it as an access denied.
    $exists = !!$this->itemFactory->getBufferItem($context, $paragraph_uuid);
    return AccessResult::allowedIf($exists);
  }

}