Issue #3450576 by kristiaanvandeneynde: Access policies should be marked as final to encourage decorating

core/lib/Drupal/Core/Session/SuperUserAccessPolicy.php

@@ -7,7 +7,7 @@ namespace Drupal\Core\Session;
 /**
  * Grants user 1 an all access pass.
  */
-class SuperUserAccessPolicy extends AccessPolicyBase {
+final class SuperUserAccessPolicy extends AccessPolicyBase {
 
   /**
    * {@inheritdoc}

core/lib/Drupal/Core/Session/UserRolesAccessPolicy.php

@@ -9,7 +9,7 @@ use Drupal\Core\Entity\EntityTypeManagerInterface;
 /**
  * Grants permissions based on a user's roles.
  */
-class UserRolesAccessPolicy extends AccessPolicyBase {
+final class UserRolesAccessPolicy extends AccessPolicyBase {
 
   public function __construct(protected EntityTypeManagerInterface $entityTypeManager) {}