<?php
declare(strict_types=1);
namespace Crea\ParameterBundle\Voter;
use Crea\ParameterBundle\Entity\ParameterGroup;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
use Symfony\Component\Security\Core\User\UserInterface;
/**
* @extends Voter<string, ParameterGroup>
*/
class ParameterGroupVoter extends Voter
{
public const string LIST = 'PARAMETER_GROUP_LIST';
public const string CREATE = 'PARAMETER_GROUP_CREATE';
public const string UPDATE = 'PARAMETER_GROUP_UPDATE';
public const string REMOVE = 'PARAMETER_GROUP_REMOVE';
protected function supports($attribute, $subject): bool
{
return in_array($attribute, [
self::LIST,
self::CREATE,
self::UPDATE,
self::REMOVE,
]) && (null === $subject || $subject instanceof ParameterGroup);
}
protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
{
/** @var UserInterface $loggedUser */
$loggedUser = $token->getUser();
if (!$loggedUser instanceof UserInterface) {
return false;
}
switch ($attribute) {
case self::LIST:
return $this->voteOnList($loggedUser);
case self::CREATE:
return $this->voteOnCreate($loggedUser);
case self::UPDATE:
return $this->voteOnUpdate($subject, $loggedUser);
case self::REMOVE:
return $this->voteOnRemove($subject, $loggedUser);
}
return false;
}
private function voteOnList(UserInterface $loggedUser): bool
{
return in_array(self::LIST, $loggedUser->getRoles());
}
private function voteOnCreate(UserInterface $loggedUser): bool
{
return in_array(self::CREATE, $loggedUser->getRoles());
}
private function voteOnUpdate(?ParameterGroup $subject, UserInterface $loggedUser): bool
{
if (null === $subject) {
return false;
}
return in_array(self::UPDATE, $loggedUser->getRoles());
}
private function voteOnRemove(?ParameterGroup $subject, UserInterface $loggedUser): bool
{
if (null === $subject) {
return false;
}
return in_array(self::REMOVE, $loggedUser->getRoles());
}
}