src/Security/PermissionVoter.php line 10

Open in your IDE?
  1. <?php 
  3. namespace App\Security;
  5. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  6. use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  8. use App\Entity\Permission;
  10. class PermissionVoter extends Voter
  11. {
  12.     const VIEW = 'view';
  13.     const EDIT = 'edit';
  14.     const WAREHOUSE_VIEW = 'warehouse_view';
  15.     const WAREHOUSE_EDIT = 'warehouse_edit';
  16.     const TRANSFER_EDIT = 'transfer_edit';
  17.     const TICKET_VIEW = 'ticket_view';
  19.     /**
  20.      * @var AccessDecisionManagerInterface
  21.      */
  22.     private $decisionManager;
  24.     public function __construct(AccessDecisionManagerInterface $decisionManager)
  25.     {
  26.         $this->decisionManager = $decisionManager;
  27.     }
  29.     protected function supports(string $attribute, mixed $subject): bool
  30.     {
  31.         if (!in_array($attribute, array(self::VIEW, self::EDIT, self::WAREHOUSE_VIEW, self::WAREHOUSE_EDIT, self::TRANSFER_EDIT, self::TICKET_VIEW))) {
  32.             return false;
  33.         }
  35.         return true;
  36.     }
  38.     protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
  39.     {
  40.         $user = $token->getUser();
  42.         $actualPermission = $subject;
  43.         $warehouseId = $subject;
  44.         $transferId = $subject;
  45.         $ticketId = $subject;
  47.         switch ($attribute) {
  48.             case self::VIEW:
  49.                 if ($user->getPermissionType($actualPermission) == "R" || $user->getPermissionType($actualPermission) == "RW"){
  50.                     return true;
  51.                 }
  52.                 break;
  53.             case self::EDIT:
  54.                 if ($user->getPermissionType($actualPermission) == "RW"){
  55.                     return true;
  56.                 }
  57.                 break;
  58.             case self::WAREHOUSE_VIEW:
  59.                 if ($user->getPermissionWarehouse($warehouseId) == "R" || $user->getPermissionWarehouse($warehouseId) == "RW"){
  60.                     return true;
  61.                 }
  62.                 break;
  63.             case self::WAREHOUSE_EDIT:
  64.                 if ($user->getPermissionWarehouse($warehouseId) == "RW"){
  65.                     return true;
  66.                 }
  67.                 break;
  68.             case self::TRANSFER_EDIT:
  69.                 if ($user->getPermissionTransfer($transferId)){
  70.                     return true;
  71.                 }
  72.                 break;
  73.             case self::TICKET_VIEW:
  74.                 if ($user->getPermissionTicket($ticketId)){
  75.                     return true;
  76.                 }
  77.                 break;
  78.         }
  80.         return false;
  81.     }
  82. }