src/Voter/ProductVoter.php line 14

Open in your IDE?
  1. <?php
  3. namespace App\Voter;
  5. use App\Entity\Product\Product;
  6. use App\Entity\User as UserEntity;
  7. use App\Model\ProductFactory;
  8. use App\Model\User\User;
  9. use Exception;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. use Symfony\Component\Security\Core\Security;
  14. class ProductVoter extends Voter
  15. {
  16.     public const MANAGE_MERCU = 'manage_mercu';
  18.     public const MANAGE_GUEST_PRODUCT = 'manage_guest_product';
  20.     public const CREATE_GUEST_PRODUCT = 'create_guest_product';
  22.     public const READ_GUEST_PRODUCT = 'read_guest_product';
  23.     private $user;
  25.     private $productFactory;
  27.     public function __construct(Security $security, User $user, ProductFactory $productFactory)
  28.     {
  29.         $this->user           = $user;
  30.         $this->productFactory = $productFactory;
  31.     }
  33.     protected function supports($attribute, $subject): bool
  34.     {
  36.         // if the attribute isn't one we support, return false
  37.         if (!in_array($attribute, [
  38.             self::MANAGE_MERCU,
  39.             self::MANAGE_GUEST_PRODUCT,
  40.             self::READ_GUEST_PRODUCT,
  41.             self::CREATE_GUEST_PRODUCT
  42.         ])) {
  43.             return false;
  44.         }
  46.         // only vote on Product objects inside this voter
  47.         if (! $subject instanceof Product) {
  48.             return false;
  49.         }
  51.         return true;
  52.     }
  54.     /**
  55.      * @param string $attribute
  56.      * @param Product $entity
  57.      *
  58.      * @return bool
  59.      * @throws Exception
  60.      */
  61.     protected function voteOnAttribute($attribute, $entity, TokenInterface $token): bool
  62.     {
  65.         $userEntity = $token->getUser();
  66.         if (! $userEntity instanceof UserEntity) {
  67.             // the user must be logged in; if not, deny access
  68.             return false;
  69.         }
  71.         $this->user->setEntity($userEntity);
  73.         switch ($attribute) {
  74.             case self::MANAGE_MERCU:
  76.                 return $this->user->canManageCurrentShopMercu();
  78.             case self::CREATE_GUEST_PRODUCT:
  82.                 return $this->user->canManageCurrentShopGuestProducts();
  84.             case self::MANAGE_GUEST_PRODUCT:
  86.                 $product = $this->productFactory->createModel($entity);
  89.                 return $product->canBeManagedBy($this->user);
  91.             case self::READ_GUEST_PRODUCT:
  93.                 $product = $this->productFactory->createModel($entity);
  96.                 return $product->canBeSeenBy($this->user);
  98.         }
  100.         return false;
  101.     }
  102. }