src/AppBundle/Security/EntityActionsVoter.php line 14

Open in your IDE?
  1. <?php
  3. namespace AppBundle\Security;
  5. use AppBundle\Entity\EntityActionsInterface;
  6. use AppBundle\Entity\User;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. /**
  12.  * Class EntityActionsVoter.
  13.  */
  14. class EntityActionsVoter extends Voter
  15. {
  16.     /**
  17.      * @var AuthorizationCheckerInterface
  18.      */
  19.     private $authorizationChecker;
  21.     /**
  22.      * EntityActionVoter constructor.
  23.      *
  24.      * @param AuthorizationCheckerInterface $authorizationChecker
  25.      */
  26.     public function __construct(AuthorizationCheckerInterface $authorizationChecker)
  27.     {
  28.         $this->authorizationChecker = $authorizationChecker;
  29.     }
  31.     /**
  32.      * {@inheritdoc}
  33.      */
  34.     protected function supports($attribute, $subject)
  35.     {
  36.         if (!in_array($attribute, $this->getSupportedAttributes())) {
  37.             return false;
  38.         }
  40.         return $subject instanceof EntityActionsInterface;
  41.     }
  43.     /**
  44.      * {@inheritdoc}
  45.      * @param EntityActionsInterface $subject
  46.      */
  47.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  48.     {
  49.         $user = $token->getUser();
  51.         if (!$user instanceof User) {
  52.             return false;
  53.         }
  55.         foreach ($subject->getDeleteActionRoles() as $role) {
  56.             if (!$this->authorizationChecker->isGranted($role, $subject)) {
  57.                 return false;
  58.             }
  59.         }
  61.         return true;
  62.     }
  64.     /**
  65.      * @return array
  66.      */
  67.     private function getSupportedAttributes(): array
  68.     {
  69.         return [
  70.             EntityActionsInterface::DELETE_ACTION,
  71.         ];
  72.     }
  73. }