vendor/datenwerk/ginger-bundle/Security/FileImportVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace DW\GingerBundle\Security;
  5. use DW\GingerBundle\Entity\User;
  6. use DW\GingerBundle\Import\Entity\FileImport;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. class FileImportVoter extends Voter
  12. {
  13.     const CREATE = 'create';
  14.     const VIEW = 'view';
  15.     const EDIT = 'edit';
  16.     const DELETE = 'delete';
  17.     const LAUNCH = 'launch';
  19.     /**
  20.      * @var AccessDecisionManagerInterface
  21.      */
  22.     private AccessDecisionManagerInterface $decisionManager;
  24.     public function __construct(AccessDecisionManagerInterface $decisionManager)
  25.     {
  26.         $this->decisionManager = $decisionManager;
  27.     }
  29.     /**
  30.      * {@inheritDoc}
  31.      */
  32.     protected function supports($attribute, $subject): bool
  33.     {
  34.         // if the attribute isn't one we support, return false
  35.         if (!in_array($attribute, array(self::VIEW, self::EDIT, self::CREATE, self::DELETE, self::LAUNCH))) {
  36.             return false;
  37.         }
  38.         // only vote on fileimport objects inside this voter
  39.         if (!$subject instanceof FileImport) {
  40.             return false;
  41.         }
  43.         return true;
  44.     }
  46.     /**
  47.      * {@inheritDoc}
  48.      */
  49.     protected function voteOnAttribute($attribute, $fileImport, TokenInterface $token): bool
  50.     {
  51.         /**
  52.          * @var FileImport $fileImport
  53.          */
  54.         $user = $token->getUser();
  55.         if (!$user instanceof User) {
  56.             // the user must be logged in; if not, deny access
  57.             return false;
  58.         }
  60.         switch ($attribute) {
  61.             case self::CREATE:
  62.                 return $this->decisionManager->decide($token, ['ROLE_GINGER_FILE_IMPORT_EDITOR']);
  63.             case self::VIEW:
  64.             case self::EDIT:
  65.             case self::DELETE:
  66.             case self::LAUNCH:
  67.                 return
  68.                     $this->decisionManager->decide($token, ['ROLE_GINGER_FILE_IMPORT_ADMIN'])
  69.                     || $user === $fileImport->getOwner();
  70.         }
  71.         throw new \LogicException('This code should not be reached!');
  72.     }
  73. }