src/Security/Voters/UserVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voters;
  5. use App\Entity\Manufacturer;
  6. use App\Entity\User;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  9. use Symfony\Component\Security\Core\Security;
  11. class UserVoter extends Voter
  12. {
  13.     private Security $security;
  15.     public const IF_USER_AGREED_CONDITIONS  = 'user.can_access';
  16.     public const IS_APP_CUSTOMER  = 'user.is_app_customer';
  17.     public const IS_MANUFACTURER = 'user.is_manufacturer';
  19.     private const ATTRIBUTES = [
  20.         self::IF_USER_AGREED_CONDITIONS,
  21.         self::IS_MANUFACTURER,
  22.         self::IS_APP_CUSTOMER,
  23.     ];
  25.     public function __construct(Security $security)
  26.     {
  27.         $this->security = $security;
  28.     }
  30.     protected function supports($attribute, $subject): bool
  31.     {
  32.         return in_array($attribute, self::ATTRIBUTES);
  33.     }
  35.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  36.     {
  37.         switch ($attribute) {
  38.             case self::IF_USER_AGREED_CONDITIONS:
  39.                 return $this->canAccess($subject);
  40.             case self::IS_APP_CUSTOMER:
  41.                 return $this->isAppCustomer($subject);
  42.             case self::IS_MANUFACTURER:
  43.                 return $this->isManufacturer($subject);
  44.         }
  46.         throw new \LogicException('Invalid attribute: '.$attribute);
  47.     }
  49.     private function canAccess($subject) : bool
  50.     {
  51.         if ( !$this->security->getUser() ) {
  52.             return false;
  53.         }
  55.         if ( $this->security->isGranted('user.is_manufacturer') ) {
  56.             return false;
  57.         }
  59.         return true;
  60.     }
  62.     private function isAppCustomer(?User $user): bool
  63.     {
  64.         // return (bool)$this->security->getUser()->getCustomer(); // please use me --- TODO
  65.         if (!$user) {
  66.             return false;
  67.         }
  68.         return (bool)$user->getCustomer();
  69.     }
  71.     private function isManufacturer(): bool
  72.     {
  73.         if ( !$user = $this->security->getUser()) {
  74.             return false;
  75.         }
  77.         return $user->getManufacturer() instanceof Manufacturer;
  78.     }
  79. }