src/Security/Voter/Profile/Positions/PositionsVoter.php line 13

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Security\Voter\Profile\Positions;
  7. use App\Model\User\Entity\User\Role\Permission;
  8. use App\Security\UserIdentity;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. use Symfony\Component\Security\Core\Security;
  13. class PositionsVoter extends Voter
  14. {
  15.     public const POSITIONS_LIST = 'positions_list';
  16.     public const POSITIONS_CREATE = 'positions_create';
  18.     private $security;
  20.     public function __construct(Security $security)
  21.     {
  22.         $this->security = $security;
  23.     }
  25.     protected function supports(string $attribute, $subject): bool
  26.     {
  27.         return in_array($attribute, [self::POSITIONS_LIST, self::POSITIONS_CREATE,], true);
  28.     }
  30.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  31.     {
  32.         if ($this->security->isGranted('ROLE_MODERATOR')) {
  33.             return true;
  34.         }
  36.         $user = $token->getUser();
  37.         if (!$user instanceof UserIdentity) {
  38.             return false;
  39.         }
  41.         if ($user->getId() !== $subject->user_id) {
  42.             return false;
  43.         }
  45.         switch ($attribute) {
  46.             case self::POSITIONS_LIST:
  47.                 return $user->isPermission(Permission::POSITIONS_LIST);
  48.                 break;
  50.             case self::POSITIONS_CREATE:
  51.                 return $user->isPermission(Permission::POSITIONS_CREATE);
  52.                 break;
  53.         }
  54.         return false;
  55.     }
  56. }