Summary
The node_access system is a somewhat obscure, yet powerful access control API. However, it is severely inhibited for a number of reasons:
- It is not widely understood
- It is hard to understand because of poor terminology and conflicting use of terminology
- It is limited the the Node entity type
The proposal is to implement a new entity-type agnostic access control API that will sit alongside existing systems (not replace permissions/roles, or node_access for BC reasons). We are now ideally positioned to finally implement a new system because of Drupal 8's release cycle and its much better understood and coherent entity system. That is, entities are finally first-class citizens.
Please contribute to technical proposal for a generic entity grants system in Drupal 8 Core
We want to reach a consensus about the architecture and terminology used in the new generic entity access system before we start with the implementation. Therefore, the audience of the proposal is for technical maintainers of Drupal core and people following the drupal.org issue.
https://docs.google.com/document/d/1jIWKVoYbdVeEg-Kz_5yvlMvi7PycoHZWg4xX...
Related issues
#1810320: Remove EntityTranslationControllerInterface::getAccess() once have entity access is postponed on this issue.