public function File::access

Overrides Entity::access().

The "view" operation is not supported on the File Entity itself because it has no page callback (yet), but there is separately file_download_access() to check if a file is downloadable.

Parameters

string $op: The operation to be performed on the file. Possible values are:

• create
• update
• delete

User|AnonymousUser|object $account: (optional) The user to check for. Leave it to NULL to check for the global user.

Return value

bool: TRUE if access is granted, FALSE otherwise.

Overrides Entity::access

File

modules/file/file.entity.inc, line 163

Entity controller and class for files.

Class

File

Defines the file entity class.

Code

public function access($op, $account = NULL) {
  if ($op == 'create') {
    return self::createAccess(NULL, $account);
  }
  elseif (!in_array($op, array('update', 'delete'), TRUE)) {
    // If the $op was not one of the supported ones, we return access denied.
    return FALSE;
  }

  // If no user object is supplied, the access check is for the current user.
  if (empty($account)) {
    $account = $GLOBALS['user'];
  }

  if ($op == 'update') {
    return user_access('manage files', $account);
  }
  elseif ($op == 'delete') {
    return user_access('delete files', $account);
  }

  return FALSE;
}