src/Security/Voter/Media/MemberMediaVoter.php line 19

Open in your IDE?
  1. <?php
  2. /*
  3.  * Author: Dominik Piekarski <code@dompie.de>
  4.  * Created at: 2021/08/11 14:49
  5.  */
  6. declare(strict_types=1);
  8. namespace App\Security\Voter\Media;
  10. use App\Entity\Member;
  11. use App\Entity\MemberMedia;
  12. use App\Security\ApiUser;
  13. use App\Service\Content\MemberContentService;
  14. use App\Service\Media\MemberMediaService;
  15. use App\Service\User\MemberOperatorService;
  16. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  17. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  19. class MemberMediaVoter extends Voter
  20. {
  21.     public const PERMISSION_DELETE = 'delete';
  22.     public const PERMISSION_CREATE = 'create';
  24.     protected MemberContentService $memberContentService;
  26.     public function __construct(MemberMediaService $service)
  27.     {
  28.         $this->memberMediaService = $service;
  29.     }
  31.     protected function supports(string $attribute, $subject): bool
  32.     {
  33.         if (!$subject instanceof MemberMedia) {
  34.             return false;
  35.         }
  37.         return in_array($attribute, [
  38.             self::PERMISSION_DELETE,
  39.             self::PERMISSION_CREATE,
  40.         ], true);
  41.     }
  43.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  44.     {
  45.         /**
  46.          * @var $user ApiUser
  47.          * @var $subject MemberMedia
  48.          */
  49.         $user = $token->getUser();
  51.         if (!$user instanceof ApiUser) {
  52.             return false;
  53.         }
  55.         if ($user->getIsAdmin()) {
  56.             return true;
  57.         }
  59.         switch ($attribute) {
  60.             case self::PERMISSION_DELETE:
  61.                 return $subject->getMember()->getId() === $user->getMember()->getId();
  62.             case self::PERMISSION_CREATE:
  63.                 return $this->isSameOrOperatedBy($subject->getMember(), $user);
  64.             default:
  65.                 return false;
  66.         }
  67.     }
  69.     protected function isSameOrOperatedBy(Member $amateur, ApiUser $user): bool
  70.     {
  71.         if ($user->getMember()->getId() === $amateur->getId()) {
  72.             return true;
  73.         }
  75.         if ($user->getIsOperator()) {
  76.             return MemberOperatorService::isMemberOperatedByUser($amateur, $user);
  77.         }
  79.         return false;
  80.     }
  81. }