getUsername() == "no_edit" && $operation == "update") { // Deny edit access. return AccessResult::forbidden(); } if ($entity->getUsername() == "no_delete" && $operation == "delete") { // Deny delete access. return AccessResult::forbidden(); } return AccessResult::neutral(); }