ISTWCMS-5412: adding block visibility and permissions to publication references block

src/Plugin/Block/PublicationReferenceBlock.php

@@ -2,10 +2,13 @@
 
 namespace Drupal\uw_dashboard\Plugin\Block;
 
+use Drupal\Core\Access\AccessResult;
 use Drupal\Core\Block\BlockBase;
 use Drupal\Core\Entity\EntityTypeManagerInterface;
 use Drupal\Core\Form\FormStateInterface;
 use Drupal\Core\Plugin\ContainerFactoryPluginInterface;
+use Drupal\Core\Session\AccountInterface;
+use Drupal\Core\Session\AccountProxyInterface;
 use Symfony\Component\DependencyInjection\ContainerInterface;
 
 /**
@@ -25,6 +28,13 @@ class PublicationReferenceBlock extends BlockBase implements ContainerFactoryPlu
    */
   protected $entityTypeManager;
 
+  /**
+   * The current user.
+   *
+   * @var \Drupal\Core\Session\AccountProxyInterface
+   */
+  protected $currentUser;
+
   /**
    * {@inheritdoc}
    */
@@ -38,7 +48,8 @@ class PublicationReferenceBlock extends BlockBase implements ContainerFactoryPlu
       $configuration,
       $plugin_id,
       $plugin_definition,
-      $container->get('entity_type.manager')
+      $container->get('entity_type.manager'),
+      $container->get('current_user')
     );
   }
 
@@ -53,15 +64,19 @@ class PublicationReferenceBlock extends BlockBase implements ContainerFactoryPlu
    *   The plugin implementation definition.
    * @param \Drupal\Core\Entity\EntityTypeManagerInterface $entityTypeManager
    *   Entity type manager.
+   * @param \Drupal\Core\Session\AccountProxyInterface $currentUser
+   *   The current user.
    */
   public function __construct(
     array $configuration,
     $plugin_id,
     $plugin_definition,
-    EntityTypeManagerInterface $entityTypeManager
+    EntityTypeManagerInterface $entityTypeManager,
+    AccountProxyInterface $currentUser
   ) {
     parent::__construct($configuration, $plugin_id, $plugin_definition);
     $this->entityTypeManager = $entityTypeManager;
+    $this->currentUser = $currentUser;
   }
 
   /**
@@ -69,6 +84,13 @@ class PublicationReferenceBlock extends BlockBase implements ContainerFactoryPlu
    */
   public function build() {
 
+    // Add a message if the user does not have access to the block.
+    if (!$this->currentUser->hasPermission('edit any bibcite_reference')) {
+      return [
+        '#markup' => 'You do not have permission to view this block.',
+      ];
+    }
+
     // Load the view.
     /** @var \Drupal\views\ViewExecutable $view */
     $view = $this->entityTypeManager
@@ -120,4 +142,11 @@ class PublicationReferenceBlock extends BlockBase implements ContainerFactoryPlu
 
   }
 
+  /**
+   * {@inheritdoc}
+   */
+  protected function blockAccess(AccountInterface $account) {
+    return AccessResult::allowedIfHasPermission($account, 'edit any bibcite_reference');
+  }
+
 }