Drupal 7 Module Development

Chapter 9
}
if (module_implements('node_grants')) {
$query = db_select('node_access');
$query->addExpression('1');
$query->condition('grant_' . $op, 1, '>=');
$nids = db_or()->condition('nid', $node->nid);
if ($node->status) {
$nids->condition('nid', 0);
}
$query->condition($nids);
$query->range(0, 1);
$grants = db_or();
foreach (node_access_grants($op, $account) as $realm => $gids) {
foreach ($gids as $gid) {
$grants->condition(db_and()
->condition('gid', $gid)
->condition('realm', $realm)
);
}
}
if (count($grants) > 0) {
$query->condition($grants);
}
$result = (bool) $query
->execute()
->fetchField();
$rights[$account->uid][$cid][$op] = $result;
return $result;
}
elseif (is_object($node) && $op == 'view' && $node->status) {
// If no modules implement hook_node_grants(), the default
// behavior is to allow all users to view published nodes,
// so reflect that here.
$rights[$account->uid][$cid][$op] = TRUE;
return TRUE;
}
Here we get to the heart of the Node Access API. The key is in the function
node_access_grants(), which defines the permissions for the current user for the
current operation. Modules respond to this function using hook_node_grants(),
which we will examine in detail a little later.
[ 249 ]