src/Invoice/Security/InvoiceCommentVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Invoice\Security;
  5. use App\Api\Controller\Invoice\Comment\InvoiceCommentTrait;
  6. use AppBundle\Entity\User;
  7. use BillingBundle\Entity\Invoice;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. class InvoiceCommentVoter extends Voter
  12. {
  13.     use InvoiceCommentTrait;
  14.     
  15.     public const CAN_ADD_COMMENTS = 'CAN_ADD_COMMENTS';
  16.     public const CAN_GET_COMMENTS = 'CAN_GET_COMMENTS';
  18.     private static array $attributes = [
  19.         self::CAN_ADD_COMMENTS,
  20.         self::CAN_GET_COMMENTS,
  21.     ];
  23.     protected function supports($attribute, $subject): bool
  24.     {
  25.         return in_array($attribute, self::$attributes, true) && $subject instanceof Invoice;
  26.     }
  28.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  29.     {
  30.         $user = $token->getUser();
  32.         if (!$user instanceof User) {
  33.             return false;
  34.         }
  36.         switch ($attribute) {
  37.             case self::CAN_ADD_COMMENTS:
  38.             case self::CAN_GET_COMMENTS:
  39.                 return $subject instanceof Invoice && ($subject->getMatter() !== null
  40.                     ? $this->hasMatterAccess($subject, $user)
  41.                     : $this->hasContactAccess($subject, $user));
  42.             default:
  43.                 throw new \LogicException('This code should not be reached');
  44.         }
  45.     }
  47.     /**
  48.      * @param Invoice $invoice
  49.      * @param User $user
  50.      * @return boolean
  51.      */
  52.     private function hasMatterAccess(Invoice $invoice, User $user): bool
  53.     {
  54.         return in_array($user, $this->getMatterUsers($invoice), true);
  55.     }
  57.     /**
  58.      * @param Invoice $invoice
  59.      * @param User $user
  60.      * @return boolean
  61.      */
  62.     private function hasContactAccess(Invoice $invoice, User $user): bool
  63.     {
  64.         $contact = $invoice->getCustomer();
  65.         $config = $invoice->getLawFirm()->getLawFirmConfig();
  67.         return $contact->getOwner() === $user || $config->isFullContactAccess();
  68.     }
  69. }