function FileUpload::ensureFileUploadAccess

Ensures that the given account is allowed to upload a file.

Parameters

\Drupal\Core\Session\AccountInterface $account: The account for which access should be checked.

\Drupal\Core\Field\FieldDefinitionInterface $field_definition: The field for which the file is to be uploaded.

\Drupal\Core\Entity\FieldableEntityInterface|null $entity: The entity, if one exists, for which the file is to be uploaded.

1 call to FileUpload::ensureFileUploadAccess()

FileUpload::handleFileUploadForResource in core/modules/jsonapi/src/Controller/FileUpload.php

Handles JSON:API file upload requests.

File

core/modules/jsonapi/src/Controller/FileUpload.php, line 263

Class

FileUpload

Handles file upload requests.

Namespace

Drupal\jsonapi\Controller

Code

protected static function ensureFileUploadAccess(AccountInterface $account, FieldDefinitionInterface $field_definition, ?FieldableEntityInterface $entity = NULL) {
    $access_result = $entity ? static::checkFileUploadAccess($account, $field_definition, $entity) : static::checkFileUploadAccess($account, $field_definition);
    if (!$access_result->isAllowed()) {
        $reason = 'The current user is not permitted to upload a file for this field.';
        if ($access_result instanceof AccessResultReasonInterface) {
            $reason .= ' ' . $access_result->getReason();
        }
        throw new AccessDeniedHttpException($reason);
    }
}