Added access check for page info.

quantcdn · Jan 21, 2024 · 9889238 · 9889238
1 parent 525a7a2
commit 9889238
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/Utility.php b/src/Utility.php
@@ -128,6 +128,12 @@ public static function inList($item, array $list) {
    */
   public static function getPageInfo(array $urls = NULL) : string {
     try {
+      // Only allow administrators and content editors access.
+      $roles = ['administrator', 'content_editor', 'editor'];
+      if (empty(array_intersect($roles, \Drupal::currentUser()->getRoles()))) {
+        return '';
+      }
+
       // Default to the current page.
       if (!$urls) {
         $urls = [self::getUrl()];