src/Security/Authorization/Voter/ProjectVoter.php line 8

Open in your IDE?
  1. <?php
  3. namespace App\Security\Authorization\Voter;
  4.  
  5. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  6. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  7.  
  8. class ProjectVoter implements VoterInterface
  9. {
  10.     const VIEW = 'VIEW';
  11.     const EDIT = 'EDIT';
  12.     const DELETE = 'DELETE';
  13.     const CREATE = 'CREATE';
  14.     const LIST = 'LIST';
  15.     const CREATE_ATLASSIAN = 'CREATE_ATLASSIAN';
  16.     const INIT_CHEQ = 'INIT_CHEQ';
  17.  
  18.     public function supportsAttribute($attribute)
  19.     {
  20.  
  21.         return in_array($attribute, array(
  22.             self::VIEW,
  23.             self::EDIT,
  24.             self::DELETE,
  25.             self::CREATE,
  26.             self::LIST,
  27.             self::CREATE_ATLASSIAN,
  28.             self::INIT_CHEQ,
  29.         ));
  30.     }
  31.  
  32.     public function supportsClass($class)
  33.     {
  34.  
  35.         $supportedClass = 'App\Entity\Project';
  36.  
  37.         if (is_string($class)) {
  38.             if ($class === $supportedClass) {
  39.                 return true;
  40.             } else {
  41.                 return false;
  42.             }
  43.         }
  44.         if(is_null($class)) {
  45.             return true;
  46.         }
  47.         return $supportedClass === get_class($class) || is_subclass_of(get_class($class), $supportedClass);
  48.     }
  49.  
  50.  
  51.     public function vote(TokenInterface $token, $entity, array $attributes)
  52.     {
  54.         $user = $token->getUser();
  55.         if (!is_object($user)) {
  56.             return VoterInterface::ACCESS_DENIED;
  57.         }
  58.  
  59.         if (!$this->supportsClass($entity)) {
  60.             return VoterInterface::ACCESS_ABSTAIN;
  61.         }
  62.         
  63.         $attribute = $attributes[0];
  64.         if(is_array($attribute)) {
  65.             $attribute = $attribute[0];
  66.         };
  67.         if($user->hasRole("SuperUsers")) {
  68.             return VoterInterface::ACCESS_GRANTED;
  69.         }
  70.         switch($attribute) {
  71.             case self::LIST:
  72.                 return VoterInterface::ACCESS_GRANTED;
  73.                 break;
  74.             case self::VIEW:
  75.                 return VoterInterface::ACCESS_GRANTED;
  76.                 break;
  77.             case self::CREATE:
  78.                 if($user->hasRole("SuperUsers") || $user->hasRole("Deliveries")) {
  79.                     return VoterInterface::ACCESS_GRANTED;
  80.                 } else {
  81.                     return VoterInterface::ACCESS_DENIED;
  82.                 }
  83.                 break;
  84.             case self::EDIT:
  85.                 if($user->hasRole("SuperUsers") || $user->hasRole("Deliveries") || $user->hasRole("Developers")) {
  86.                     return VoterInterface::ACCESS_GRANTED;
  87.                 } else {
  88.                     return VoterInterface::ACCESS_DENIED;
  89.                 }
  90.                 break;
  91.             case self::DELETE:
  92.                 if($user->hasRole("SuperUsers")) {
  93.                     return VoterInterface::ACCESS_GRANTED;
  94.                 } else {
  95.                     return VoterInterface::ACCESS_DENIED;
  96.                 }
  97.                 break;
  98.             case self::CREATE_ATLASSIAN:
  99.                 if($user->hasRole("SuperUsers") || $user->hasRole("Deliveries")) {
  100.                     return VoterInterface::ACCESS_GRANTED;
  101.                 } else {
  102.                     return VoterInterface::ACCESS_DENIED;
  103.                 }
  104.                 break;
  105.             case self::INIT_CHEQ:
  106.                 if($user->hasRole("SuperUsers") || $user->hasRole("Deliveries")) {
  107.                     return VoterInterface::ACCESS_GRANTED;
  108.                 } else {
  109.                     return VoterInterface::ACCESS_DENIED;
  110.                 }
  111.                 break;
  112.         }
  113.  
  114.         return VoterInterface::ACCESS_DENIED;
  115.     }
  116. }