src/Security/Voter/EmployeeVoter.php line 14

Open in your IDE?
  1. <?php
  2. namespace App\Security\Voter;
  3. use App\Entity\Admin;
  4. use App\Entity\Employee;
  5. use App\Service\PermissionService;
  6. use Doctrine\ORM\EntityManagerInterface;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  9. use Symfony\Component\Security\Core\Security;
  10. class EmployeeVoter extends Voter
  11. {
  12.     const VIEW "view";
  13.     const MANAGE "manage";
  14.     private $security;
  15.     private $entityManager;
  16.     public function __construct(Security $securityEntityManagerInterface $entityManager)
  17.     {
  18.         $this->security $security;
  19.         $this->entityManager $entityManager;
  20.     }
  21.     public function supports($attribute$subject)
  22.     {
  23.         if(!in_array($attribute, [self::VIEWself::MANAGE])){
  24.             return false;
  25.         }
  26.         if($attribute == self::MANAGE && !$subject instanceof Employee){
  27.             return false;
  28.         }
  29.         return true;
  30.     }
  31.     public function voteOnAttribute($attribute$subjectTokenInterface $token)
  32.     {
  33.         $user $token->getUser();
  34.         if(!$user instanceof Admin){
  35.             return false;
  36.         }
  37.         if($this->security->isGranted('ROLE_SUPERADMIN')){
  38.             return true;
  39.         }
  40.         $service = new PermissionService($this->entityManager);
  41.         $permissions $service->getUserPermissions($user);
  42.         switch($attribute){
  43.             case self::MANAGE:
  44.                 if(in_array("employee_manage"$permissions)){
  45.                     return true;
  46.                 }
  47.                 return false;
  48.                 break;
  49.         }
  50.         return false;
  51.     }
  52. }