Commit 8a49cc7d authored by Floyd Mann's avatar Floyd Mann Committed by Nikolay Lobachev
Browse files

Issue #3393973 by floydm, LOBsTerr: User Accept/Decline invitation access denied

parent 4f242a35
Loading
Loading
Loading
Loading
+0 −1
Original line number Diff line number Diff line
@@ -4,7 +4,6 @@ ginvite.invitation.accept:
    _controller: '\Drupal\ginvite\Controller\InvitationOperations::accept'
    _title: 'Accept invitation and join group'
  requirements:
    _group_installed_content: 'group_invitation'
    _custom_access: '\Drupal\ginvite\Controller\InvitationOperations::checkAccess'
  options:
      parameters:
+7 −1
Original line number Diff line number Diff line
@@ -175,8 +175,14 @@ class InvitationOperations extends ControllerBase {
   *   Access check result.
   */
  public function checkAccess(GroupContentInterface $group_content) {
    $invited = $group_content->get('entity_id')->getString();
    $group = $group_content->getGroup();

    // Plugin is not installed.
    if (!$group->getGroupType()->hasContentPlugin('group_invitation')) {
      return AccessResult::forbidden();
    }

    $invited = $group_content->get('entity_id')->getString();
    $membership = $this->membershipLoader->load($group, $this->currentUser());
    $current_state = $group_content->get('invitation_status')->value;