<?php
namespace Crea\ParameterBundle\Voter;
use Crea\ParameterBundle\Entity\ParameterType;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
use Symfony\Component\Security\Core\User\UserInterface;
class ParameterTypeVoter extends Voter
{
const CREATE = "PARAMETER_TYPE_CREATE";
const UPDATE = "PARAMETER_TYPE_UPDATE";
const UPDATE_CODE = "PARAMETER_TYPE_UPDATE_CODE";
const REMOVE = "PARAMETER_TYPE_REMOVE";
/**
* @inheritDoc
*/
protected function supports($attribute, $subject): bool
{
return in_array($attribute, [
self::CREATE,
self::UPDATE,
self::UPDATE_CODE,
self::REMOVE,
]) && ($subject === null || $subject instanceof ParameterType);
}
/**
* @inheritDoc
*/
protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
{
/** @var UserInterface $loggedUser */
$loggedUser = $token->getUser();
if (!$loggedUser instanceof UserInterface) {
return false;
}
switch ($attribute) {
case self::CREATE:
return $this->voteOnCreate($loggedUser);
case self::UPDATE:
return $this->voteOnUpdate($subject, $loggedUser);
case self::UPDATE_CODE:
return $this->voteOnUpdateCode($subject, $loggedUser);
case self::REMOVE:
return $this->voteOnRemove($subject, $loggedUser);
}
return false;
}
private function voteOnCreate(UserInterface $loggedUser): bool
{
return in_array(self::CREATE, $loggedUser->getRoles());
}
private function voteOnUpdate(?ParameterType $subject, UserInterface $loggedUser): bool
{
if (null === $subject) {
return false;
}
return in_array(self::UPDATE, $loggedUser->getRoles());
}
private function voteOnUpdateCode(?ParameterType $subject, UserInterface $loggedUser): bool
{
if (null === $subject) {
return false;
}
return in_array(self::UPDATE_CODE, $loggedUser->getRoles());
}
private function voteOnRemove(?ParameterType $subject, UserInterface $loggedUser): bool
{
if (null === $subject) {
return false;
}
return in_array(self::REMOVE, $loggedUser->getRoles());
}
}