vendor/crea/security-bundle/src/Voter/UserGroupVoter.php line 16

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace Crea\SecurityBundle\Voter;
  7. use Crea\SecurityBundle\Entity\User;
  8. use Crea\SecurityBundle\Entity\UserGroup;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. use Symfony\Component\Security\Core\User\UserInterface;
  13. /**
  14. * @extends Voter<string, UserGroup>
  15. */
  16. class UserGroupVoter extends Voter
  17. {
  18. public const USER_GROUP_LIST = 'SECURITY_USER_GROUP_LIST';
  19. public const USER_GROUP_CREATE = 'SECURITY_USER_GROUP_CREATE';
  20. public const USER_GROUP_UPDATE = 'SECURITY_USER_GROUP_UPDATE';
  21. public const USER_GROUP_REMOVE = 'SECURITY_USER_GROUP_REMOVE';
  23. protected function supports($attribute, $subject): bool
  24. {
  25. return in_array($attribute, [
  26. self::USER_GROUP_LIST,
  27. self::USER_GROUP_CREATE,
  28. self::USER_GROUP_UPDATE,
  29. self::USER_GROUP_REMOVE,
  30. ]) && (null === $subject || $subject instanceof UserGroup);
  31. }
  33. protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  34. {
  35. /** @var User $loggedUser */
  36. $loggedUser = $token->getUser();
  38. if (!$loggedUser instanceof UserInterface) {
  39. return false;
  40. }
  42. switch ($attribute) {
  43. case self::USER_GROUP_LIST:
  44. return $this->voteOnList($loggedUser);
  45. case self::USER_GROUP_CREATE:
  46. return $this->voteOnCreate($loggedUser);
  47. case self::USER_GROUP_UPDATE:
  48. return $this->voteOnUpdate($subject, $loggedUser);
  49. case self::USER_GROUP_REMOVE:
  50. return $this->voteOnRemove($subject, $loggedUser);
  51. }
  53. return false;
  54. }
  56. private function voteOnList(UserInterface $loggedUser): bool
  57. {
  58. if (in_array(self::USER_GROUP_LIST, $loggedUser->getRoles())) {
  59. return true;
  60. }
  62. return false;
  63. }
  65. private function voteOnCreate(UserInterface $loggedUser): bool
  66. {
  67. if (in_array(self::USER_GROUP_CREATE, $loggedUser->getRoles())) {
  68. return true;
  69. }
  71. return false;
  72. }
  74. private function voteOnUpdate(?UserGroup $subject, User $loggedUser): bool
  75. {
  76. if (!in_array(self::USER_GROUP_UPDATE, $loggedUser->getRoles())) {
  77. return false;
  78. }
  80. if (null === $subject) {
  81. return true;
  82. }
  84. if (in_array('ROLE_ADMIN', $loggedUser->getRoles())) {
  85. return true;
  86. }
  88. return false;
  89. }
  91. private function voteOnRemove(?UserGroup $subject, User $loggedUser): bool
  92. {
  93. if (!in_array(self::USER_GROUP_REMOVE, $loggedUser->getRoles())) {
  94. return false;
  95. }
  97. if (null === $subject) {
  98. return true;
  99. }
  101. if (in_array('ROLE_ADMIN', $loggedUser->getRoles())) {
  102. return true;
  103. }
  105. return false;
  106. }
  107. }