src/Security/Voter/User/BlogEntryVoter.php line 15

Open in your IDE?
  1. <?php
  2. /*
  3.  * Author: Dominik Piekarski <code@dompie.de>
  4.  * Created at: 2021/11/12 12:40
  5.  */
  6. declare(strict_types=1);
  8. namespace App\Security\Voter\User;
  10. use App\Entity\BlogEntry;
  11. use App\Security\ApiUser;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  15. class BlogEntryVoter extends Voter
  16. {
  17.     public const PERMISSION_MANAGE = 'manage';
  18.     public const PERMISSION_VIEW_UNPUBLISHED = 'view_unpublished';
  20.     protected function supports(string $attribute, $subject): bool
  21.     {
  22.         return $subject instanceof BlogEntry
  23.             && in_array($attribute, [
  24.                 self::PERMISSION_MANAGE,
  25.                 self::PERMISSION_VIEW_UNPUBLISHED,
  26.             ]);
  27.     }
  29.     /**
  30.      * @param BlogEntry $subject
  31.      */
  32.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  33.     {
  34.         /** @var ApiUser $user */
  35.         $user = $token->getUser();
  36.         if ($user->getIsAdmin()) {
  37.             return true;
  38.         }
  39.         if (!$user->getIsAmateur()) {
  40.             return false;
  41.         }
  43.         switch ($attribute) {
  44.             case self::PERMISSION_VIEW_UNPUBLISHED:
  45.             case self::PERMISSION_MANAGE:
  46.                 return $subject->getMember()->getId() === $user->getMember()->getId();
  47.         }
  49.         return false;
  50.     }
  51. }