Drupal 8.0.0 beta 12. More info: https://www.drupal.org/node/2514176

core/modules/system/src/Access/CronAccessCheck.php

@@ -0,0 +1,38 @@
+<?php
+
+/**
+ * @file
+ * Contains \Drupal\system\Access\CronAccessCheck.
+ */
+
+namespace Drupal\system\Access;
+
+use Drupal\Core\Access\AccessResult;
+use Drupal\Core\Routing\Access\AccessInterface;
+
+/**
+ * Access check for cron routes.
+ */
+class CronAccessCheck implements AccessInterface {
+
+  /**
+   * Checks access.
+   *
+   * @param string $key
+   *   The cron key.
+   *
+   * @return \Drupal\Core\Access\AccessResultInterface
+   *   The access result.
+   */
+  public function access($key) {
+    if ($key != \Drupal::state()->get('system.cron_key')) {
+      \Drupal::logger('cron')->notice('Cron could not run because an invalid key was used.');
+      return AccessResult::forbidden()->setCacheMaxAge(0);
+    }
+    elseif (\Drupal::state()->get('system.maintenance_mode')) {
+      \Drupal::logger('cron')->notice('Cron could not run because the site is in maintenance mode.');
+      return AccessResult::forbidden()->setCacheMaxAge(0);
+    }
+    return AccessResult::allowed()->setCacheMaxAge(0);
+  }
+}

core/modules/system/src/Access/DbUpdateAccessCheck.php

@@ -0,0 +1,42 @@
+<?php
+
+/**
+ * @file
+ * Contains \Drupal\system\Access\DbUpdateAccessCheck.
+ */
+
+namespace Drupal\system\Access;
+
+use Drupal\Core\Routing\Access\AccessInterface;
+use Drupal\Core\Access\AccessResult;
+use Drupal\Core\Session\AccountInterface;
+use Drupal\Core\Site\Settings;
+
+/**
+ * Access check for database update routes.
+ */
+class DbUpdateAccessCheck implements AccessInterface {
+
+  /**
+   * Checks access for update routes.
+   *
+   * @param \Drupal\Core\Session\AccountInterface $account
+   *   The currently logged in account.
+   *
+   * @return string
+   *   A \Drupal\Core\Access\AccessInterface constant value.
+   */
+  public function access(AccountInterface $account) {
+    // Allow the global variable in settings.php to override the access check.
+    if (Settings::get('update_free_access')) {
+      return AccessResult::allowed()->setCacheMaxAge(0);
+    }
+
+    if ($account->hasPermission('administer software updates')) {
+      return AccessResult::allowed()->cachePerPermissions();
+    }
+    else {
+      return AccessResult::forbidden()->cachePerPermissions();
+    }
+  }
+}