src/Security/Voter/User/OperatorVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter\User;
  5. use App\Entity\Member;
  6. use App\Security\ApiUser;
  7. use App\Service\Messenger\MessengerPropertyService;
  8. use App\Service\Property\MemberPropertyService;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. class OperatorVoter extends Voter
  13. {
  14.     public const READ = 'operator_read';
  15.     public const GUESTBOOK = 'operator_guestbook';
  16.     public const STATS = 'operator_stats';
  18.     protected MemberPropertyService $propertyService;
  20.     public function __construct(MemberPropertyService $propertyService)
  21.     {
  22.         $this->propertyService = $propertyService;
  23.     }
  25.     protected function supports(string $attribute, $subject): bool
  26.     {
  27.         if (!$subject instanceof Member) {
  28.             return false;
  29.         }
  31.         return in_array($attribute, [
  32.             self::READ,
  33.             self::GUESTBOOK,
  34.             self::STATS,
  35.         ], true);
  36.     }
  38.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  39.     {
  40.         $user = $token->getUser();
  42.         if (!$user instanceof ApiUser || !$user->getIsOperator()) {
  43.             return false;
  44.         }
  46.         /*
  47.          * @var $subject Member
  48.          */
  49.         switch ($attribute) {
  50.             case self::STATS:
  51.                 $prop = MessengerPropertyService::PROPERTY_MESSENGER_OPERATOR_AMATEUR_STATS_ENABLED;
  52.                 if (!(bool) $this->propertyService->getValueForMember($user->getMember(), $prop)) {
  53.                     return false;
  54.                 }
  55.                 // no break
  56.             case self::GUESTBOOK:
  57.                 $prop = MessengerPropertyService::PROPERTY_MESSENGER_OPERATOR_AMATEUR_GUESTBOOK_ENABLED;
  58.                 if (!(bool) $this->propertyService->getValueForMember($user->getMember(), $prop)) {
  59.                     return false;
  60.                 }
  61.         }
  63.         return $user->getMember()->getId() === $subject->getId();
  64.     }
  65. }