#3422294 Replace permission check with custom access callback, giving access for development mode.

Closes #3422294

src/Controller/ServerEndpointController.php

@@ -2,6 +2,8 @@
 
 namespace Drupal\cl_server\Controller;
 
+use Drupal\Core\Access\AccessResult;
+use Drupal\Core\Session\AccountInterface;
 use Drupal\sdc\ComponentPluginManager;
 use Drupal\sdc\Exception\ComponentNotFoundException;
 use Drupal\sdc\Exception\TemplateNotFoundException;
@@ -270,4 +272,20 @@ class ServerEndpointController extends ControllerBase {
     return $this->findExtensionName($path);
   }
 
+  /**
+   * Checks access for the cl_server render route.
+   *
+   * @param \Drupal\Core\Session\AccountInterface $account
+   *   The currently logged in account.
+   * @return \Drupal\Core\Access\AccessResultInterface
+   *   The access result.
+   */
+  public function access(AccountInterface $account) {
+    if ($this->developmentMode) {
+      return AccessResult::allowed();
+    }
+
+    return AccessResult::allowedIfHasPermission($account, 'use cl server');
+  }
+
 }