src/Voter/InvitationVoter.php line 15

Open in your IDE?
  1. <?php
  3. namespace App\Voter;
  5. use App\Voter\Supplier;
  6. use App\Voter\SupplierFactory;
  7. use App\Entity\Invitation;
  8. use App\Entity\User;
  9. use App\Model\InvitationFactory;
  10. use App\Model\User\UserFactory;
  11. use Exception;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  15. class InvitationVoter extends Voter
  16. {
  17.     public const DELETE = 'delete';
  20.     private $userFactory;
  22.     /**
  23.      * @var SupplierFactory
  24.      */
  25.     private $invitationFactory;
  27.     public function __construct(
  28.         UserFactory $userFactory,
  29.         InvitationFactory $invitationFactory
  30.     ) {
  32.         $this->invitationFactory = $invitationFactory;
  33.         $this->userFactory       = $userFactory;
  34.     }
  36.     protected function supports($attribute, $subject): bool
  37.     {
  39.         // if the attribute isn't one we support, return false
  40.         if (! in_array($attribute, [
  41.             self::DELETE
  42.         ])) {
  43.             return false;
  44.         }
  46.         if (! $subject instanceof Invitation) {
  47.             return false;
  48.         }
  50.         return true;
  51.     }
  53.     /**
  54.      * @param string $attribute
  55.      * @param Supplier $entity
  56.      *
  57.      * @return bool
  58.      * @throws Exception
  59.      */
  60.     protected function voteOnAttribute($attribute, $entity, TokenInterface $token): bool
  61.     {
  64.         $userEntity = $token->getUser();
  65.         if (! $userEntity instanceof User) {
  66.             // the user must be logged in; if not, deny access
  67.             return false;
  68.         }
  70.         $user       = $this->userFactory->createModel($userEntity);
  71.         $invitation = $this->invitationFactory->createModel($entity);
  74.         switch ($attribute) {
  75.             case self::DELETE:
  76.                 return $user->canDeleteInvitation($invitation);
  78.         }
  80.         return false;
  81.     }
  82. }