Skip to content

Commit 453354d

Browse files
authored
Make team members list operations access-aware (#433)
1 parent 94e52be commit 453354d

File tree

1 file changed

+16
-8
lines changed

1 file changed

+16
-8
lines changed

modules/apigee_edge_teams/src/Controller/TeamMembersList.php

Lines changed: 16 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -228,14 +228,22 @@ protected function buildOperations(string $member, TeamInterface $team): array {
228228
*/
229229
protected function getOperations(string $member, TeamInterface $team) {
230230
$operations = [];
231-
$operations['edit'] = [
232-
'title' => $this->t('Edit'),
233-
'url' => Url::fromRoute('entity.team.member.edit', ['team' => $team->id(), 'developer' => $member], ['query' => ['destination' => $team->toUrl('members')->toString()]]),
234-
];
235-
$operations['remove'] = [
236-
'title' => $this->t('Remove'),
237-
'url' => Url::fromRoute('entity.team.member.remove', ['team' => $team->id(), 'developer' => $member], ['query' => ['destination' => $team->toUrl('members')->toString()]]),
238-
];
231+
232+
$url = Url::fromRoute('entity.team.member.edit', ['team' => $team->id(), 'developer' => $member], ['query' => ['destination' => $team->toUrl('members')->toString()]]);
233+
if ($url->access()) {
234+
$operations['edit'] = [
235+
'title' => $this->t('Edit'),
236+
'url' => $url,
237+
];
238+
}
239+
240+
$url = Url::fromRoute('entity.team.member.remove', ['team' => $team->id(), 'developer' => $member], ['query' => ['destination' => $team->toUrl('members')->toString()]]);
241+
if ($url->access()) {
242+
$operations['remove'] = [
243+
'title' => $this->t('Remove'),
244+
'url' => $url,
245+
];
246+
}
239247

240248
return $operations;
241249
}

0 commit comments

Comments
 (0)