vendor/crea/security-bundle/src/Voter/ProfileVoter.php line 16

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace Crea\SecurityBundle\Voter;
  7. use Crea\SecurityBundle\Entity\Profile;
  8. use Crea\SecurityBundle\Entity\User;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. use Symfony\Component\Security\Core\User\UserInterface;
  13. /**
  14. * @extends Voter<string, Profile>
  15. */
  16. class ProfileVoter extends Voter
  17. {
  18. public const PROFILE_LIST = 'SECURITY_PROFILE_LIST';
  19. public const PROFILE_CREATE = 'SECURITY_PROFILE_CREATE';
  20. public const PROFILE_UPDATE = 'SECURITY_PROFILE_UPDATE';
  21. public const PROFILE_DUPLICATE = 'SECURITY_PROFILE_DUPLICATE';
  22. public const PROFILE_REMOVE = 'SECURITY_PROFILE_REMOVE';
  24. protected function supports($attribute, $subject): bool
  25. {
  26. return in_array($attribute, [
  27. self::PROFILE_LIST,
  28. self::PROFILE_CREATE,
  29. self::PROFILE_UPDATE,
  30. self::PROFILE_DUPLICATE,
  31. self::PROFILE_REMOVE,
  32. ]) && (null === $subject || $subject instanceof Profile);
  33. }
  35. protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  36. {
  37. /** @var User $loggedUser */
  38. $loggedUser = $token->getUser();
  40. if (!$loggedUser instanceof UserInterface) {
  41. return false;
  42. }
  44. switch ($attribute) {
  45. case self::PROFILE_LIST:
  46. return $this->voteOnList($loggedUser);
  47. case self::PROFILE_CREATE:
  48. return $this->voteOnCreate($loggedUser);
  49. case self::PROFILE_UPDATE:
  50. return $this->voteOnUpdate($subject, $loggedUser);
  51. case self::PROFILE_DUPLICATE:
  52. return $this->voteOnDuplicate($subject, $loggedUser);
  53. case self::PROFILE_REMOVE:
  54. return $this->voteOnRemove($subject, $loggedUser);
  55. }
  57. return false;
  58. }
  60. private function voteOnList(UserInterface $loggedUser): bool
  61. {
  62. if (in_array(self::PROFILE_LIST, $loggedUser->getRoles())) {
  63. return true;
  64. }
  66. return false;
  67. }
  69. private function voteOnCreate(UserInterface $loggedUser): bool
  70. {
  71. if (in_array(self::PROFILE_CREATE, $loggedUser->getRoles())) {
  72. return true;
  73. }
  75. return false;
  76. }
  78. private function voteOnUpdate(?Profile $subject, User $loggedUser): bool
  79. {
  80. if (!in_array(self::PROFILE_UPDATE, $loggedUser->getRoles())) {
  81. return false;
  82. }
  84. if (null === $subject) {
  85. return true;
  86. }
  88. if ($loggedUser->getProfile()->getId() !== $subject->getId()) {
  89. return true;
  90. }
  92. if (in_array('ROLE_ADMIN', $loggedUser->getRoles())) {
  93. return true;
  94. }
  96. return false;
  97. }
  99. private function voteOnRemove(?Profile $subject, User $loggedUser): bool
  100. {
  101. if (!in_array(self::PROFILE_REMOVE, $loggedUser->getRoles())) {
  102. return false;
  103. }
  105. if (null === $subject) {
  106. return true;
  107. }
  109. if ($loggedUser->getProfile()->getId() !== $subject->getId()) {
  110. return true;
  111. }
  113. if (in_array('ROLE_ADMIN', $loggedUser->getRoles())) {
  114. return true;
  115. }
  117. return false;
  118. }
  120. private function voteOnDuplicate(?Profile $subject, User $loggedUser): bool
  121. {
  122. return $this->voteOnUpdate($subject, $loggedUser);
  123. }
  124. }