src/Security/Voter/Procedure/ProcedureOldVoter.php line 17

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Security\Voter\Procedure;
  7. use App\Model\User\Entity\User\Role\Permission;
  8. use App\Model\User\Entity\User\Role\RoleConstants;
  9. use App\Model\Work\Procedure\Entity\Status;
  10. use App\ReadModel\Profile\ProfileFetcher;
  11. use App\Security\UserIdentity;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  14. use Symfony\Component\Security\Core\Security;
  16. //TODO: Воутер не доделан!
  17. class ProcedureOldVoter extends Voter
  18. {
  19.     public const PROCEDURE_LIST = 'procedure_list';
  20.     public const PROCEDURE_LIST_OWNER = 'procedure_list_owner';
  21.     public const PROCEDURE_SHOW = 'procedure_show_old';
  22.     public const PROCEDURE_CREATE = 'procedure_create';
  23.     public const PROCEDURE_EDIT = 'procedure_edit';
  24.     public const PROCEDURE_RECALL = 'procedure_recall';
  25.     public const PROCEDURE_SIGN_XML = 'procedure_sign_xml';
  26.     public const PROCEDURE_UPLOAD_FILE_TO = 'procedure_upload_file_to';
  27.     public const PROCEDURE_CREATE_PROTOCOL = 'procedure_create_protocol';
  28.     public const PROCEDURE_DELETE_FILE_TO = 'procedure_delete_file_to';
  30.     private $security;
  31.     private $profileFetcher;
  33.     public function __construct(Security $security, ProfileFetcher $profileFetcher)
  34.     {
  35.         $this->security = $security;
  36.         $this->profileFetcher = $profileFetcher;
  37.     }
  39.     protected function supports(string $attribute, $subject): bool
  40.     {
  41.         return in_array($attribute, [self::PROCEDURE_LIST, self::PROCEDURE_LIST_OWNER, self::PROCEDURE_SHOW, self::PROCEDURE_CREATE, self::PROCEDURE_EDIT, self::PROCEDURE_RECALL, self::PROCEDURE_SIGN_XML, self::PROCEDURE_UPLOAD_FILE_TO, self::PROCEDURE_CREATE_PROTOCOL, self::PROCEDURE_DELETE_FILE_TO], true);
  42.     }
  44.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  45.     {
  46.         if ($this->security->isGranted(RoleConstants::moderator()->getValue())) {
  47.             return true;
  48.         }
  50.         if ($this->security->isGranted(RoleConstants::acceptor()->getValue())) {
  51.             return true;
  52.         }
  54.         $user = $token->getUser();
  55.         if (!$user instanceof UserIdentity) {
  56.             return false;
  57.         }
  59.         if ($this->security->isGranted(RoleConstants::organizerCustomer()->getValue())) {
  60.             return true;
  61.         }
  63.         $profile = $this->profileFetcher->find($user->getProfileId());
  65.         switch ($attribute) {
  66.             case self::PROCEDURE_LIST:
  67.                 return $user->isPermission(Permission::PROCEDURE_LIST);
  68.                 break;
  70.             case self::PROCEDURE_LIST_OWNER:
  71.                 return $user->isPermission(Permission::PROCEDURE_LIST_OWNER);
  72.                 break;
  74.             case self::PROCEDURE_SHOW:
  76.                 if ($profile !== null) {
  77.                     if ($profile->isParticipant()) {
  78.                         return $subject->status != Status::new()->getName();
  79.                     }
  80.                 }
  81.                 return $user->isPermission(Permission::PROCEDURE_SHOW);
  82.                 break;
  84.             case self::PROCEDURE_CREATE:
  85.                 return $user->isPermission(Permission::PROCEDURE_CREATE);
  86.                 break;
  88.             case self::PROCEDURE_EDIT:
  89.                 return $user->isPermission(Permission::PROCEDURE_EDIT);
  90.                 break;
  92.             case self::PROCEDURE_RECALL:
  93.                 return $user->isPermission(Permission::PROCEDURE_RECALL);
  94.                 break;
  96.             case self::PROCEDURE_SIGN_XML:
  97.                 return $user->isPermission(Permission::PROCEDURE_SIGN_XML);
  98.                 break;
  100.             case self::PROCEDURE_UPLOAD_FILE_TO:
  101.                 return $user->isPermission(Permission::PROCEDURE_UPLOAD_FILE_TO);
  102.                 break;
  104.             case self::PROCEDURE_DELETE_FILE_TO:
  105.                 return $user->isPermission(Permission::PROCEDURE_DELETE_FILE_TO);
  106.                 break;
  108.             case self::PROCEDURE_CREATE_PROTOCOL:
  109.                 return $user->isPermission(Permission::PROCEDURE_CREATE_PROTOCOL);
  110.                 break;
  111.         }
  112.         return false;
  113.     }
  114. }