src/Security/Voter/AdminVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  6. use App\Entity\Admin;
  7. use App\Service\PermissionService;
  8. use Doctrine\ORM\EntityManagerInterface;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. use Symfony\Component\Security\Core\Security;
  13. class AdminVoter extends Voter
  14. {
  15.     const VIEW = 'view';
  16.     const ADD = 'add';
  17.     const EDIT = 'edit';
  18.     const DELETE = 'delete';
  19.     const PERMISSION = 'permission';
  21.     private $security;
  23.     private $entityManager;
  25.     public function __construct(Security $security, EntityManagerInterface $entityManager)
  26.     {
  27.         $this->security = $security;
  28.         $this->entityManager = $entityManager;
  29.     }
  31.     public function supports($attribute, $subject): bool
  32.     {
  33.         if(!in_array($attribute, [self::DELETE, self::ADD, self::VIEW, self::EDIT, self::PERMISSION])){
  34.             return false;
  35.         }
  36.         if($attribute !== self::VIEW && !$subject instanceof Admin){
  37.             return false;
  38.         }
  39.         return true;
  40.     }
  42.     public function voteOnAttribute($attribute, $subject, TokenInterface $token)
  43.     {
  44.         $user = $token->getUser();
  45.         if(!$user instanceof Admin){
  46.             return false;
  47.         }
  48.         if($this->security->isGranted('ROLE_SUPERADMIN')) {
  49.             return true;
  50.         }
  52.         $service = new PermissionService($this->entityManager);
  53.         $permissions = $service->getUserPermissions($user);
  54.         switch($attribute){
  55.             case self::VIEW:
  56.                 if(in_array("admin", $permissions)){
  57.                     return true;
  58.                 }
  59.                 return false;
  60.                 break;
  61.             case self::DELETE:
  62.                 if(in_array("admin_delete", $permissions)){
  63.                     return true;
  64.                 }
  65.                 return false;
  66.                 break;
  67.             case self::ADD:
  68.                 if(in_array("admin_add", $permissions)){
  69.                     return true;
  70.                 }
  71.                 return false;
  72.                 break;
  73.             case self::EDIT:
  74.                 if(in_array("admin_edit", $permissions)){
  75.                     return true;
  76.                 }
  77.                 if($subject->getId() == $user->getId()){
  78.                     return true;
  79.                 }
  80.                 return false;
  81.                 break;
  82.             case self::PERMISSION:
  83.                 if(in_array("admin_permissions", $permissions)){
  84.                     return true;
  85.                 }
  86.                 return false;
  87.                 break;
  88.         }
  90.         return false;
  91.     }
  93. }