Add ability to disable the cloning option and form

Created a new MR.

Added edit/clone/delete permissions and implemented custom access callbacks for routes that check both the permission and entity access.

Note that all new permissions are disabled by default. So, after merging changes, all contextual links will by hidden.
I guess it's better to merge changes to the next release e.g. 4.0.x

Hmm, yeah that is kinda breaking then. Wouldnt the correct path be adding an upgrade hook that adds the permission to the roles currently having that permission? Then its non breaking and can be disabled if you like.

+ 1 for the permission approach with update hook

Implemented an update hook to set permissions for users with authenticated role.

Tryinig to get through all issues.

Should the permission migration be different? Wouldnt the user need like content edit permsissions, the authenticated role seems a little optimistic, this could also be a user that can just login to comment or something?

For the time-being, if anyone wants to disable the contextual link to the clone form, then using this in a custom module works. (You have to log out and back in and possibly clear cache for it to take effect)

/**
 * Implements hook_contextual_links_alter().
 */
function MODULE_contextual_links_alter(array &$links, $group, array $route_parameters) {
  if ($group == 'paragraph') {
    if (isset($links['paragraphs_edit.clone_form'])) {
      unset($links['paragraphs_edit.clone_form']);
    }
  }
}