src/Security/Voter/TransactionVoter.php line 14

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\AbstractCollaborator;
  6. use App\Entity\Reference\ReferenceTransactionStatus;
  7. use App\Entity\Transaction;
  8. use Exception;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. use Symfony\Component\Security\Core\Security;
  12. use Symfony\Component\Security\Core\User\UserInterface;
  14. class TransactionVoter extends Voter
  15. {
  16.     public const PUT = 'PUT';
  18.     public const TRANSACTION_STATUS_ALLOWED_TO_PUT = [
  19.         ReferenceTransactionStatus::REFERENCE_CODE_TRANSACTION_STATUS_PAID,
  20.         ReferenceTransactionStatus::REFERENCE_CODE_TRANSACTION_STATUS_UNDER_COMPROMISE
  21.     ];
  23.     /**
  24.      * @var Security
  25.      */
  26.     private Security $security;
  28.     /**
  29.      * @param Security $security
  30.      */
  31.     public function __construct(Security $security)
  32.     {
  33.         $this->security = $security;
  34.     }
  36.     protected function supports(string $attribute, $subject): bool
  37.     {
  38.         return $attribute === self::PUT && $subject instanceof Transaction;
  39.     }
  41.     /**
  42.      * @throws Exception
  43.      */
  44.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  45.     {
  46.         /** @var UserInterface $user */
  47.         $user = $token->getUser();
  49.         // Deny anonymous users
  50.         if (!$user instanceof UserInterface) {
  51.             return false;
  52.         }
  54.         /** @var Transaction $subject */
  55.         if ($attribute === self::PUT) {
  56.             return (($subject->getOutputAgent() === $user)
  57.                     && in_array($subject->getReferenceTransactionStatus()->getCode(), self::TRANSACTION_STATUS_ALLOWED_TO_PUT, true))
  58.                 || $this->security->isGranted(
  59.                     AbstractCollaborator::ROLE_MANAGER
  60.                 );
  61.         }
  63.         throw new Exception(sprintf('Unhandled attribute "%s"', $attribute));
  64.     }
  65. }