<?php
namespace Crea\ParameterBundle\Voter;
use Crea\ParameterBundle\Entity\ParameterGroup;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
use Symfony\Component\Security\Core\User\UserInterface;
class ParameterGroupVoter extends Voter
{
const LIST = "PARAMETER_GROUP_LIST";
const CREATE = "PARAMETER_GROUP_CREATE";
const UPDATE = "PARAMETER_GROUP_UPDATE";
const REMOVE = "PARAMETER_GROUP_REMOVE";
/**
* @inheritDoc
*/
protected function supports($attribute, $subject): bool
{
return in_array($attribute, [
self::LIST,
self::CREATE,
self::UPDATE,
self::REMOVE,
]) && ($subject === null || $subject instanceof ParameterGroup);
}
/**
* @inheritDoc
*/
protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
{
/** @var UserInterface $loggedUser */
$loggedUser = $token->getUser();
if (!$loggedUser instanceof UserInterface) {
return false;
}
switch ($attribute) {
case self::LIST:
return $this->voteOnList($loggedUser);
case self::CREATE:
return $this->voteOnCreate($loggedUser);
case self::UPDATE:
return $this->voteOnUpdate($subject, $loggedUser);
case self::REMOVE:
return $this->voteOnRemove($subject, $loggedUser);
}
return false;
}
private function voteOnList(UserInterface $loggedUser): bool
{
return in_array(self::LIST, $loggedUser->getRoles());
}
private function voteOnCreate(UserInterface $loggedUser): bool
{
return in_array(self::CREATE, $loggedUser->getRoles());
}
private function voteOnUpdate(?ParameterGroup $subject, UserInterface $loggedUser): bool
{
if (null === $subject) {
return false;
}
return in_array(self::UPDATE, $loggedUser->getRoles());
}
private function voteOnRemove(?ParameterGroup $subject, UserInterface $loggedUser): bool
{
if (null === $subject) {
return false;
}
return in_array(self::REMOVE, $loggedUser->getRoles());
}
}