src/Security/Voter/CandidatesVoter.php line 13

Open in your IDE?
  1. <?php
  2. namespace App\Security\Voter;
  3. use App\Entity\Candidates;
  4. use App\Service\PermissionService;
  5. use Doctrine\ORM\EntityManagerInterface;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  8. use Symfony\Component\Security\Core\Security;
  9. use Symfony\Component\Security\Core\User\UserInterface;
  10. class CandidatesVoter extends Voter
  11. {
  12.     const VIEW 'view';
  13.     const EDIT 'edit';
  14.     const DELETE 'delete';
  15.     const EXPORT 'export';
  16.     private $security;
  17.     private $entityManager;
  18.     public function __construct(Security $securityEntityManagerInterface $entityManager)
  19.     {
  20.         $this->security $security;
  21.         $this->entityManager $entityManager;
  22.     }
  23.     protected function supports($attribute$subject): bool
  24.     {
  25.         return in_array($attribute, [self::VIEWself::EDITself::DELETEself::EXPORT])
  26.             && $subject instanceof Candidates;
  27.     }
  28.     protected function voteOnAttribute($attribute$subjectTokenInterface $token): bool
  29.     {
  30.         $user $token->getUser();
  31.         if(!$user instanceof UserInterface){
  32.             return false;
  33.         }
  34.         if($this->security->isGranted('ROLE_SUPERADMIN')) {
  35.             return true;
  36.         }
  37.         $service = new PermissionService($this->entityManager);
  38.         $permissions $service->getUserPermissions($user);
  39.         switch($attribute){
  40.             case self::DELETE:
  41.                 if(in_array("candidates_delete"$permissions)){
  42.                     return true;
  43.                 }
  44.                 return false;
  45.                 break;
  46.             case self::EDIT:
  47.                 if(in_array("candidates_edit"$permissions)){
  48.                     return true;
  49.                 }
  50.                 return false;
  51.                 break;
  52.         }
  53.         return false;
  54.     }
  55. }