src/Security/Voters/TicketVoter.php line 15

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voters;
  6. use App\Entity\Ticket;
  7. use App\Entity\User;
  8. use App\Entity\Manufacturer;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. use Symfony\Component\Security\Core\Security;
  15. class TicketVoter extends Voter
  16. {
  17.     private Security $security;
  20.     public const CAN_ADD_UPLOAD     = 'ticket.can.add.upload';
  21.     public const CAN_EDIT           = 'ticket.can.be.edited';
  22.     public const CAN_RESOLVE        = 'ticket.can_resolve';
  24.     private const ATTRIBUTES = [
  25.         self::CAN_ADD_UPLOAD,
  26.         self::CAN_EDIT,
  27.         self::CAN_RESOLVE,
  28.     ];
  30.     public function __construct(Security $security)
  31.     {
  32.         $this->security = $security;
  33.     }
  36.     protected function supports($attribute, $subject): bool
  37.     {
  38.         return in_array($attribute, self::ATTRIBUTES);
  39.     }
  41.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  42.     {
  43.         $user = $token->getUser();
  45.         switch ($attribute) {
  46.             case self::CAN_ADD_UPLOAD:
  47.                 return $this->canAddUpload($subject);
  48.             case self::CAN_EDIT:
  49.                 return $this->canEdit($subject);
  50.             case self::CAN_RESOLVE:
  51.                 return $this->canResolve($subject);
  52.         }
  53.         throw new \LogicException('Invalid attribute: ' . $attribute);
  54.     }
  56.     private function canEdit(Ticket $ticket): bool
  57.     {
  58.         if ($this->security->isGranted('ROLE_IT_SUPPORT')) {
  59.             return true;
  60.         }
  62.         if ( in_array($ticket->getStatus(), [Ticket::STATUS_NEW]) && $ticket->getCreatedBy() === $this->security->getUser()) {
  63.             return true;
  64.         }
  66.         return false;
  67.     }
  70.     private function canAddUpload(Ticket $ticket): bool
  71.     {
  72.         if ($this->security->isGranted('ROLE_IT_SUPPORT')) {
  73.             return true;
  74.         }
  75.         
  76.         if ( in_array($ticket->getStatus(), [Ticket::STATUS_NEW]) && $ticket->getCreatedBy() === $this->security->getUser()) {
  77.             return true;
  78.         }
  80.         return false;
  81.     }
  82.   
  83.     private function canResolve($subject) : bool
  84.     {
  85.         if ( $this->security->isGranted('ROLE_IT_SUPPORT') ) {
  86.             return true;
  87.         }
  88.         return false;
  89.     }
  90. }