<?php
namespace App\Security\Voter;
use App\Entity\Candidates;
use App\Service\PermissionService;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Security\Core\User\UserInterface;
class CandidatesVoter extends Voter
{
const VIEW = 'view';
const EDIT = 'edit';
const DELETE = 'delete';
const EXPORT = 'export';
private $security;
private $entityManager;
public function __construct(Security $security, EntityManagerInterface $entityManager)
{
$this->security = $security;
$this->entityManager = $entityManager;
}
protected function supports($attribute, $subject): bool
{
return in_array($attribute, [self::VIEW, self::EDIT, self::DELETE, self::EXPORT])
&& $subject instanceof Candidates;
}
protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
{
$user = $token->getUser();
if(!$user instanceof UserInterface){
return false;
}
if($this->security->isGranted('ROLE_SUPERADMIN')) {
return true;
}
$service = new PermissionService($this->entityManager);
$permissions = $service->getUserPermissions($user);
switch($attribute){
case self::DELETE:
if(in_array("candidates_delete", $permissions)){
return true;
}
return false;
break;
case self::EDIT:
if(in_array("candidates_edit", $permissions)){
return true;
}
return false;
break;
}
return false;
}
}