How to hide the tabs on the user account if it is not his account? [duplicate]

Question

My users have permission to view other users' accounts. Only the "View" tab page. This is exactly what I want.

On the user account, by default, there are three tabs:

• View

• Shortcuts

• Edit

If I am user A and I go to my account, I see the tabs. If I'm user A and I go to user B's account, I don't go to his tab (it makes sense).

Now if I create a page view (e.g. bookmarks) with a menu tab, for user accounts. If I'm User A and go to User B's account, I can see the "Bookmarks" tab.

How to hide tabs on user accounts except current user account?

There is no permission to do this.

Answer 1

You can add a RouteSubscriber with a custom access check to accomplish this. Something like:

class RouteSubscriber extends RouteSubscriberBase {

  /**
   * {@inheritdoc}
   */
  protected function alterRoutes(RouteCollection $collection) {
    if ($route = $collection->get('entity.user.canonical')) {
      $route->setRequirement('_profile_access', '\Drupal\mymodule\Access\ProfileAccessCheck::access');
    }

    if ($route = $collection->get('entity.user.edit_form')) {
      $route->setRequirement('_user_edit_access', '\Drupal\mymodule\Access\AccountEditCheck::access');
    }

    if ($route = $collection->get('entity.user.delete_form')) {
      $route->setRequirement('_user_delete_access', '\Drupal\mymodule\Access\AccountDeleteCheck::access');
    }

    // more entries...
  }

}

and so on, and so forth.

In the access classes you can implement custom logic that should dictate visibility.