src/Security/Authorization/Voter/JobVoter.php line 8

Open in your IDE?
  1. <?php
  3. namespace App\Security\Authorization\Voter;
  4.  
  5. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  6. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  7.  
  8. class JobVoter implements VoterInterface
  9. {
  10.     const VIEW = 'VIEW';
  11.     const EDIT = 'EDIT';
  12.     const DELETE = 'DELETE';
  13.     const CREATE = 'CREATE';
  14.     const LIST = 'LIST';
  15.     const RERUN = 'RERUN';
  17.  
  18.     public function supportsAttribute($attribute)
  19.     {
  20.  
  21.         return in_array($attribute, array(
  22.             self::VIEW,
  23.             self::EDIT,
  24.             self::DELETE,
  25.             self::CREATE,
  26.             self::LIST,
  27.             self::RERUN,
  28.         ));
  29.     }
  30.  
  31.     public function supportsClass($class)
  32.     {
  33.  
  34.         $supportedClass = 'App\Entity\Job';
  35.  
  36.         if (is_string($class)) {
  37.             if ($class === $supportedClass) {
  38.                 return true;
  39.             } else {
  40.                 return false;
  41.             }
  42.         }
  43.         if(is_null($class)) {
  44.             return true;
  45.         }
  46.         return $supportedClass === get_class($class) || is_subclass_of(get_class($class), $supportedClass);
  47.     }
  48.  
  49.  
  50.     public function vote(TokenInterface $token, $entity, array $attributes)
  51.     {
  53.         $user = $token->getUser();
  54.         if (!is_object($user)) {
  55.             return VoterInterface::ACCESS_DENIED;
  56.         }
  57.  
  58.         if (!$this->supportsClass($entity)) {
  59.             return VoterInterface::ACCESS_ABSTAIN;
  60.         }
  61.         
  62.         $attribute = $attributes[0];
  63.         if(is_array($attribute)) {
  64.             $attribute = $attribute[0];
  65.         };
  66.         if($user->hasRole("SuperUsers")) {
  67.             return VoterInterface::ACCESS_GRANTED;
  68.         }
  69.         switch($attribute) {
  70.             case self::LIST:
  71.                 return VoterInterface::ACCESS_GRANTED;
  72.                 break;
  73.             case self::VIEW:
  74.                 return VoterInterface::ACCESS_GRANTED;
  75.                 break;
  76.             case self::CREATE:
  77.                 return VoterInterface::ACCESS_GRANTED;
  78.                 break;
  79.             case self::EDIT:
  80.                 if($user->hasRole("SuperUsers")) {
  81.                     return VoterInterface::ACCESS_GRANTED;
  82.                 } else {
  83.                     return VoterInterface::ACCESS_DENIED;
  84.                 }
  85.                 break;
  86.             case self::DELETE:
  87.                 if($user->hasRole("SuperUsers")) {
  88.                     return VoterInterface::ACCESS_GRANTED;
  89.                 } else {
  90.                     return VoterInterface::ACCESS_DENIED;
  91.                 }
  92.                 break;
  93.             case self::RERUN:
  94.                 if($user->hasRole("SuperUsers")) {
  95.                     return VoterInterface::ACCESS_GRANTED;
  96.                 } else {
  97.                     return VoterInterface::ACCESS_DENIED;
  98.                 }
  99.                 break;
  101.         }
  102.  
  103.         return VoterInterface::ACCESS_DENIED;
  104.     }
  105. }