src/Security/Voter/Profile/Commission/CommissionVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter\Profile\Commission;
  5. use App\Model\User\Entity\User\Role\Permission;
  6. use App\ReadModel\Profile\DetailView;
  7. use App\Security\UserIdentity;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\Security;
  12. class CommissionVoter extends Voter
  13. {
  14.     public const PROFILE_COMMISSION_LIST = 'profile_commission_list';
  15.     public const PROFILE_COMMISSION_CREATE = 'profile_commission_create';
  16.     public const PROFILE_COMMISSION_SHOW = 'profile_commission_show';
  17.     public const PROFILE_COMMISSION_DELETE = 'profile_commission_delete';
  19.     private $security;
  21.     public function __construct(Security $security)
  22.     {
  23.         $this->security = $security;
  24.     }
  26.     protected function supports(string $attribute, $subject)
  27.     {
  28.         return in_array($attribute, [
  29.             self::PROFILE_COMMISSION_LIST,
  30.             self::PROFILE_COMMISSION_CREATE,
  31.             self::PROFILE_COMMISSION_SHOW,
  32.             self::PROFILE_COMMISSION_DELETE
  33.         ], true);
  34.     }
  36.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  37.     {
  38.         if ($this->security->isGranted('ROLE_MODERATOR')) {
  39.             return true;
  40.         }
  42.         $user = $token->getUser();
  43.         if (!$user instanceof UserIdentity) {
  44.             return false;
  45.         }
  47.         if (!$subject instanceof DetailView) {
  48.             return false;
  49.         }
  51.         if ($user->getId() !== $subject->user_id) {
  52.             return false;
  53.         }
  55.         switch ($attribute) {
  57.             case self::PROFILE_COMMISSION_LIST:
  58.                 return $user->isPermission(Permission::PROFILE_COMMISSION_LIST);
  59.                 break;
  61.             case self::PROFILE_COMMISSION_CREATE:
  62.                 return $user->isPermission(Permission::PROFILE_COMMISSION_CREATE);
  63.                 break;
  65.             case self::PROFILE_COMMISSION_SHOW:
  66.                 return $user->isPermission(Permission::PROFILE_COMMISSION_SHOW);
  67.                 break;
  69.             case self::PROFILE_COMMISSION_DELETE:
  70.                 return $user->isPermission(Permission::PROFILE_COMMISSION_DELETE);
  71.                 break;
  73.         }
  74.         return false;
  75.     }
  76. }