src/Security/Voter/MandateVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\AbstractCollaborator;
  6. use App\Entity\Mandate;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  9. use Symfony\Component\Security\Core\Security;
  10. use Symfony\Component\Security\Core\User\UserInterface;
  12. class MandateVoter extends Voter
  13. {
  14.     public const POST = 'POST';
  15.     public const PUT = 'PUT';
  16.     /**
  17.      * @var Security
  18.      */
  19.     private Security $security;
  21.     /**
  22.      * @param Security $security
  23.      */
  24.     public function __construct(Security $security)
  25.     {
  26.         $this->security = $security;
  27.     }
  30.     protected function supports(string $attribute, $subject): bool
  31.     {
  32.         return in_array($attribute, [self::POST,self::PUT], true) && $subject instanceof Mandate;
  33.     }
  35.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  36.     {
  37.         $user = $this->security->getUser();
  39.         // Deny anonymous users
  40.         if (!$user instanceof UserInterface) {
  41.             return false;
  42.         }
  43.         /** @var Mandate $subject */
  44.         switch ($attribute) {
  45.             case self::PUT:
  46.                 return $subject->isInProgress()
  47.                         && !$subject->isBusinessIndicationMandate()
  48.                         && ($subject->getProperty()->hasSameCollaborator($user)
  49.                     || $this->security->isGranted(AbstractCollaborator::ROLE_MANAGER));
  50.             case self::POST:
  51.                 return $subject->getProperty()->hasSameCollaborator($user)
  52.                     || $this->security->isGranted(AbstractCollaborator::ROLE_MANAGER);
  53.         }
  55.         throw new \RuntimeException(sprintf('Unhandled attribute "%s"', $attribute));
  56.     }
  57. }