Defining permissions
In Drupal, there are roles and permissions used to define robust access control lists for users. Modules use permissions to check whether the current user has access to perform an action, view specific items, or do other operations. Modules then define the permissions that are used so that Drupal is aware of them. Developers can then construct roles, which are made up of enabled permissions.
In this recipe, we will define a new permission to view custom pages defined in a module. The permission will be added to a custom route and will restrict access to the route path to users who have a role containing the permission.
Getting ready
Create a new module like the one in the first recipe. We will refer to the module as mymodule
throughout the recipe. Use your module's name in the following recipe as appropriate.
This recipe also modifies a route defined in the module. We will refer to this route as mymodule.mypage
. Modify the appropriate path in your module'srouting.yml
file...