$writable plugins.api.demo.writable * @param array $allowRoutes plugins.api.demo.allow_routes */ public function __construct( private readonly array $writable = [], private readonly array $allowRoutes = [], ) {} /** * The grant a demo account's write was let through on, or null when the * request is not a demo write at all (not a demo account, a read, a public * route). * * @throws DemoModeException when a demo account attempts a refused write. */ public function check(UserInterface $user, string $method, string $routePath, bool $isPublic): ?string { if (!$user->get('access.api.demo')) { return null; } // Public routes (/auth/*) must stay usable — a demo user still logs in. if ($isPublic || !DemoPolicy::isMutating($method)) { return null; } if (!DemoPolicy::allows($method, $routePath, DemoPolicy::expand($this->writable), $this->allowRoutes)) { throw new DemoModeException(); } $grant = DemoPolicy::grantFor($method, $routePath); return $grant === DemoPolicy::DENY ? 'allow_routes' : $grant; } }