src/Security/Voter/WorkroomVoter.php line 17

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\User;
  6. use App\Entity\UserProject;
  7. use App\Entity\UserWorkroom;
  8. use App\Entity\Workroom;
  9. use Doctrine\ORM\EntityManagerInterface;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. use Symfony\Component\Security\Core\User\UserInterface;
  14. /**
  15.  * Class WorkroomVoter.
  16.  */
  17. class WorkroomVoter extends Voter
  18. {
  19.     // Permissions.
  20.     const WORKROOM_VIEW = 'workroom_view';
  22.     // Full list.
  23.     const PERMISSIONS = [
  24.         self::WORKROOM_VIEW,
  25.     ];
  27.     private EntityManagerInterface $em;
  29.     public function __construct(EntityManagerInterface $em)
  30.     {
  31.         $this->em = $em;
  32.     }
  34.     /**
  35.      * {@inheritdoc}
  36.      */
  37.     protected function supports($attribute, $subject): bool
  38.     {
  39.         return in_array($attribute, self::PERMISSIONS) && ($subject instanceof Workroom);
  40.     }
  42.     /**
  43.      * {@inheritdoc}
  44.      */
  45.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  46.     {
  47.         /** @var User $user */
  48.         $user = $token->getUser();
  50.         // If the user is anonymous, do not grant access.
  51.         if (!$user instanceof UserInterface) {
  52.             return false;
  53.         }
  55.         // Check conditions and provide access bases on it.
  56.         switch ($attribute) {
  57.             case self::WORKROOM_VIEW:
  58.                 return $this->canView($subject, $user);
  60.             default:
  61.                 break;
  62.         }
  64.         return false;
  65.     }
  67.     /**
  68.      * Check that the user can view the workroom
  69.      * If the user has UserWorkroom entity we provide access, otherwise - not !!!
  70.      */
  71.     public function canView(Workroom $workroom, User $user): bool
  72.     {
  73.         $userProject = $this->em->getRepository(UserProject::class)->findBy([
  74.             'project' => $workroom->getProject()->getId(),
  75.             'user' => $user->getId()
  76.         ]);
  78.         return !empty($userProject);
  79.     }
  80. }