src/Security/ActionVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use App\Entity\Action;
  6. use App\Entity\User;
  7. use App\Repository\Configuration\AutorisationRepository;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. class ActionVoter extends Voter
  12. {
  14.     const ACTION_CRUD = 'ACTION_CRUD';
  15.     const ACTION_INSERT = 'ACTION_INSERT';
  16.     const ACTION_ACTIONPLAN_CRUD = 'ACTION_ACTIONPLAN_CRUD';
  17.     private $autorisationRepository;
  19.     public function __construct(AutorisationRepository $autorisationRepository)
  20.     {
  21.         
  22.         $this->autorisationRepository = $autorisationRepository;
  23.     }
  25.     protected function supports(string $attribute, $subject): bool
  26.     {
  27.         if (!in_array($attribute, [self::ACTION_CRUD, self::ACTION_INSERT,self::ACTION_ACTIONPLAN_CRUD])) {
  29.             return false;
  30.         }
  32.         // if (!($subject instanceof Action)) {
  34.         //     return false;
  35.         // }
  37.         return true;
  38.     }
  40.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  41.     {
  42.         $user = $token->getUser();
  43.         if (!$user instanceof User) {
  44.             return false;
  45.         }
  47.         $autorisation = $this->autorisationRepository->findOneBy(['code'=>$attribute]);
  48.         if (!$autorisation) {
  49.             return false;
  50.         }
  51.         
  52.         $roles = array_intersect($autorisation->getRoles(),$user->getRoles());
  53.         if(count($roles)) {
  54.             return true;
  55.         }
  56.         return false;
  58.         
  60.         throw new \LogicException('This code should not be reached!');
  61.     }
  63.     
  64. }