src/Security/Voter/AppVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\User;
  6. use App\Helper\PermissionsHandlerInterface;
  7. use App\Repository\UserRepository;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\Security;
  12. class AppVoter extends Voter
  13. {
  14.     /**
  15.      * @var UserRepository
  16.      */
  17.     protected UserRepository $userRepository;
  19.     /**
  20.      * @var PermissionsHandlerInterface
  21.      */
  22.     protected PermissionsHandlerInterface $permissionsHandler;
  24.     /**
  25.      * @var User|null
  26.      */
  27.     protected $loggedUser;
  29.     /**
  30.      * @var array
  31.      */
  32.     protected $permissions;
  35.     public function __construct(
  36.         UserRepository $userRepository,
  37.         PermissionsHandlerInterface $permissionsHandler,
  38.         Security $security
  39.     ) {
  40.         $this->userRepository = $userRepository;
  41.         $this->permissionsHandler = $permissionsHandler;
  42.         $this->permissions = array_keys($permissionsHandler->getPermissions());
  43.         $this->loggedUser = $security->getUser();
  44.     }
  46.     protected function supports($attribute, $subject)
  47.     {
  48.         if (!empty($this->loggedUser) && in_array('ROLE_ADMIN', $this->loggedUser->getRoles())) {
  49.             return true;
  50.         }
  52.         return in_array(strtoupper($attribute), $this->permissions);
  53.     }
  55.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  56.     {
  57.         if (!empty($this->loggedUser) && in_array('ROLE_ADMIN', $this->loggedUser->getRoles())) {
  58.             return true;
  59.         }
  61.         $attribute = strtoupper($attribute);
  63.         if (empty($this->loggedUser) || !in_array($attribute, $this->permissions)) {
  64.             return false;
  65.         }
  67.         $user = $this->userRepository->findOneBy(['email' => $this->loggedUser->getUsername()]);
  69.         return $user->getUserRole()->hasPermission($attribute);
  70.     }
  71. }