SHS-5907: Implementation: Editors can easily set "view" access for Private Pages

.tugboat/config.yml

@@ -45,6 +45,8 @@ services:
         - rm -rf vendor
         - composer install --no-ansi
         - mysql -h mysql -P 3306 -u tugboat -ptugboat -e 'SET GLOBAL max_allowed_packet=536870912;'
+        # Ensure this packet size persists even if MySQL restarts.
+        - echo "max_allowed_packet=536870912" >> /etc/mysql/conf.d/tugboat.cnf
         # Sync to hs_colorful, hs_colorful database & files and create user.
         - blt drupal:sync:files --site=hs_colorful
         - drush @hs_colorful.local user:create tugboat --password=pushcar || true
@@ -67,6 +69,8 @@ services:
         - rm -rf vendor
         - composer install --no-ansi
         - mysql -h mysql -P 3306 -u tugboat -ptugboat -e 'SET GLOBAL max_allowed_packet=536870912;'
+        # Ensure this packet size persists even if MySQL restarts.
+        - echo "max_allowed_packet=536870912" >> /etc/mysql/conf.d/tugboat.cnf
 
         - drush @hs_colorful.local cr
         - drush @hs_colorful.local eval '\Drupal::moduleHandler()->loadInclude("user", "install");user_update_10000();'

composer.json

@@ -74,6 +74,7 @@
         "drupal/config_update": "^2.0@alpha",
         "drupal/confirm_leave": "^1.0@beta",
         "drupal/content_access": "^2.0",
+        "drupal/content_access_simple": "^1.0@beta",
         "drupal/core": "~10.3.0",
         "drupal/core-composer-scaffold": "~10.3.0",
         "drupal/core-recommended": "~10.3.0",

config/default/content_access_simple.settings.yml

@@ -0,0 +1,11 @@
+role_config:
+  hidden_roles:
+    - anonymous
+    - administrator
+    - author
+    - intranet_viewer
+  disabled_roles:
+    - site_manager
+debug: false
+help_text_view: 'Only the chosen roles will be able to view this content (when published). <i>Site Managers</i> can always view all content.'
+unpublished_message: 'These settings only take effect once this page is published. Only <i>Site Managers</i> and <i>Contributors</i> can view unpublished private pages.'

config/default/core.extension.yml

@@ -39,6 +39,7 @@ module:
   config_update_ui: 0
   confirm_leave: 0
   content_access: 0
+  content_access_simple: 0
   contextual: 0
   core_event_dispatcher: 0
   crop: 0

config/default/user.role.site_manager.yml

@@ -188,6 +188,7 @@ permissions:
   - 'edit terms in hs_person_staff_type'
   - 'edit terms in hs_person_student_type'
   - 'edit terms in hs_publication_type'
+  - 'grant content access simple'
   - 'import hs_capx migration'
   - 'import hs_events_importer migration'
   - 'manipulate entityqueues'

docroot/profiles/humsci/su_humsci_profile/su_humsci_profile.install

@@ -1185,3 +1185,53 @@ function su_humsci_profile_update_9720() {
     ...$block_info,
   ])->save();
 }
+
+/**
+ * Grants site managers access to the new content access simple module.
+ */
+function su_humsci_profile_update_9720() {
+  \Drupal::service('module_installer')->install(['content_access_simple']);
+  user_role_grant_permissions('site_manager', [
+    'grant content access simple',
+  ]);
+}
+
+/**
+ * Changes all private pages to allow site managers view access.
+ */
+function su_humsci_profile_update_9721(&$sandbox) {
+  $node_type = 'hs_private_page';
+
+  // Update content type (and defaults for new nodes).
+  $settings = content_access_get_settings('all', $node_type);
+
+  array_push($settings['view'], 'site_manager');
+  array_push($settings['view_own'], 'site_manager');
+
+  content_access_set_settings($settings, $node_type);
+
+  // Update existing nodes, if they have different settings than default.
+  $node_storage = \Drupal::entityTypeManager()->getStorage('node');
+  if (empty($sandbox['ids'])) {
+    $sandbox['ids'] = $node_storage->getQuery()
+      ->accessCheck(FALSE)
+      ->condition('type', $node_type)
+      ->execute();
+    $sandbox['total'] = count($sandbox['ids']);
+  }
+  $node_ids = array_splice($sandbox['ids'], 0, 50);
+
+  /** @var \Drupal\node\NodeInterface $node */
+  foreach ($node_storage->loadMultiple($node_ids) as $node) {
+    /** @var \Drupal\Core\Field\FieldItemInterface $field_item */
+    $settings = content_access_get_per_node_settings($node);
+
+    if ($settings) {
+      array_push($settings['view'], 'site_manager');
+      array_push($settings['view_own'], 'site_manager');
+      content_access_save_per_node_settings($node, $settings);
+    }
+  }
+
+  $sandbox['#finished'] = count($sandbox['ids']) ? 1 - count($sandbox['ids']) / $sandbox['total'] : 1;
+}