src/Security/Voters/UploadsVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voters;
  5. use App\Entity\Upload;
  6. use App\Entity\User;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\Security;
  12. class UploadsVoter extends Voter
  13. {
  14.     private Security $security;
  16.     public const CAN_UPLOAD   = 'upload.can.be.uploaded';
  17.     public const CAN_DOWNLOAD = 'upload.can.be.downloaded';
  18.     public const CAN_EDIT = 'upload.can.be.edited';
  19.     public const CAN_PUBLIC = 'upload.can.be.public';
  21.     private const ATTRIBUTES = [
  22.         self::CAN_UPLOAD,
  23.         self::CAN_DOWNLOAD,
  24.         self::CAN_EDIT,
  25.         self::CAN_PUBLIC,
  26.     ];
  28.     public function __construct(Security $security)
  29.     {
  30.         $this->security = $security;
  31.     }
  33.     protected function supports($attribute, $subject): bool
  34.     {
  35.         return in_array($attribute, self::ATTRIBUTES);
  36.     }
  38.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  39.     {
  40.         $user = $token->getUser();
  42.         switch ($attribute) {
  43.             case self::CAN_UPLOAD:
  44.             case self::CAN_DOWNLOAD:
  45.             case self::CAN_EDIT:
  46.                 return $this->hasAccess($subject);
  47.             case self::CAN_PUBLIC:
  48.                 return $this->canPublic($subject);
  49.         }
  51.         throw new \LogicException('Invalid attribute: ' . $attribute);
  52.     }
  54.     private function hasAccess(Upload $upload): bool
  55.     {
  56.         if ($upload->getIsDeleted()) {
  57.             return false;
  58.         }
  60.         if ( in_array('ANON_USER', $upload->getAccessControl()) ) {
  61.             return true;
  62.         }
  64.         if ( in_array('MF_PROFILE', $upload->getAccessControl()) && $this->security->isGranted('user.is_manufacturer')) {
  65.             return true;
  66.         }
  68.         if ($this->security->getUser() && array_intersect($this->security->getUser()->getRoles(), $upload->getAccessControl())) {
  69.             return true;
  70.         }
  72.         return false;
  73.     }
  75.     private function canPublic(Upload $upload): bool
  76.     {
  77.         if ($upload->getIsDeleted()) {
  78.             return false;
  79.         }
  81.         if ( in_array('ANON_USER', $upload->getAccessControl()) ) {
  82.             return true;
  83.         }
  85.         return false;
  86.     }
  89. }