src/Security/EntityVoters/PlacementPageSetupVoter.php line 14

Open in your IDE?
  1. <?php
  3. namespace App\Security\EntityVoters;
  5. use ApiPlatform\Core\Api\IriConverterInterface;
  6. use App\Entity\PlacementPageSetup;
  7. use Exception;
  8. use Symfony\Component\HttpFoundation\RequestStack;
  9. use Symfony\Component\Routing\RouterInterface;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. use Symfony\Component\Security\Core\Security;
  13. use ApiPlatform\Core\Bridge\Doctrine\Orm\Paginator;
  14. class PlacementPageSetupVoter extends EntityVoter
  15. {
  16.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  17.     {
  18.         $user = $token->getUser();
  19.         if ($user && $user->getRole()->getName() === 'ROLE_SUPER_ADMIN')
  20.             return true;
  21.         switch ($attribute)
  22.         {
  23.             case 'GET_COLLECTION':
  24.                 return true;
  25.             case 'GET':
  26.                 if (!$user)
  27.                     return true;
  28.                 return $this->checkUserPermissions($user, $subject);
  29.             case 'PATCH':
  30.             case 'DELETE':
  31.             case 'PUT':
  32.                 return $this->checkUserPermissions($user, $subject);
  33.             case 'POST':
  34.                 if (!$user)
  35.                     return false;
  36.                 return true;
  37.             case 'POST_DENORMALIZE':
  38.                 return $this->isAllowedPost($user, $subject);
  39.         }
  40.         return false;
  41.     }
  43.     private function checkUserPermissions($user, PlacementPageSetup $subject): bool {
  44.         if (!$user)
  45.             return false;
  46.         if ($subject->getIsDefault())
  47.             return false;
  48.         if ($subject->isUserHasAccess($user))
  49.             return true;
  50.         return false;
  51.     }
  53.     private function isAllowedPost($user, PlacementPageSetup $subject): bool {
  54.         if (!$user)
  55.             return false;
  56.         if ($subject->getPlacementType()->isUserHasAccess($user))
  57.             return true;
  58.         return false;
  59.     }
  61.     protected function getVoteEntityClass(): string
  62.     {
  63.         return PlacementPageSetup::class;
  64.     }
  65. }