Creating a view access plugin that returns false in a REST view returns a 200 HTTP code and empty content instead of the expected 401 HTTP return code. Here is a sample class.
/**
* Access plugin.
*
* @ingroup views_access_plugins
*
* @ViewsAccess(
* id = "rest_access",
* title = @Translation("Rest Access"),
* )
*/
class RestAccess extends AccessPluginBase {
/**
* {@inheritdoc}
*/
public function access(AccountInterface $account) {
return FALSE;
}
/**
* {@inheritdoc}
*/
public function alterRouteDefinition(Route $route) {
// Allow by default, and have $this->access() function resolve access
$route->setRequirement('_access', 'TRUE');
}
}
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Leaving a note for the next person that finds this thread. I had the same question as the original author. This Lullabot article from 2018 discusses alterRouteDefinition () and helped me understand how to proceed. https://www.lullabot.com/articles/creating-custom-views-access-plugin