By dawehner on
Change record status: 
Published (View all published change records)
Project: 
Drupal core
Introduced in branch: 
8.0.x
Introduced in version: 
8.0.0-beta5
Issue links: 
https://www.drupal.org/node/2172017
Description: 

For security reasons action plugins should define which user has access to them.

Therefore action plugins must implement the access() method.

Example


 /**
  * {@inheritdoc}
  */
 public function access($operation, AccountInterface $account = NULL, $return_as_object = FALSE) {
   $result = AccessResult::allowed();
   return $return_as_object ? $result : $result->isAllowed();
 }
Impacts: 
Module developers