src/Security/Voter/BeneficiaryVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\Beneficiary;
  6. use App\Entity\User;
  7. use LogicException;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. class BeneficiaryVoter extends Voter
  12. {
  13.     public const EDIT = 'beneficiary-edit';
  14.     public const ADD_ASSOCIATED = 'beneficiary-add-associated';
  15.     public const SHOW = 'beneficiary-show';
  17.     /**
  18.      * @inheritDoc
  19.      */
  20.     protected function supports($attribute, $subject): bool
  21.     {
  22.         // if the attribute isn't one we support, return false
  23.         if (!in_array($attribute, [self::EDIT, self::ADD_ASSOCIATED, self::SHOW])) {
  24.             return false;
  25.         }
  27.         // only vote on `Beneficiary` objects
  28.         if (!$subject instanceof Beneficiary) {
  29.             return false;
  30.         }
  32.         return true;
  33.     }
  35.     /**
  36.      * @inheritDoc
  37.      */
  38.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  39.     {
  40.         $user = $token->getUser();
  42.         if (!$user instanceof User) {
  43.             // the user must be logged in; if not, deny access
  44.             return false;
  45.         }
  47.         /** @var Beneficiary $beneficiary */
  48.         $beneficiary = $subject;
  50.         switch ($attribute) {
  51.             case self::EDIT:
  52.                 return $this->canEdit($beneficiary, $user);
  53.             case self::ADD_ASSOCIATED:
  54.                 return $this->canAddAssociated($beneficiary, $user);
  55.             case self::SHOW:
  56.                 return $this->canShow($beneficiary, $user);
  57.         }
  59.         throw new LogicException('This code should not be reached!');
  60.     }
  62.     /**
  63.      * @param Beneficiary $beneficiary
  64.      * @param User $user
  65.      * @return bool
  66.      */
  67.     private function canEdit(Beneficiary $beneficiary, User $user): bool
  68.     {
  69.         return $this->canShow($beneficiary, $user);
  70.     }
  72.     /**
  73.      * @param Beneficiary $beneficiary
  74.      * @param User $user
  75.      * @return bool
  76.      */
  77.     private function canAddAssociated(Beneficiary $beneficiary, User $user): bool
  78.     {
  79.         $beneficiary->getCollective()->getProtectedPeople();
  80.         return ($this->canShow($beneficiary, $user) &&
  81.             $beneficiary->getBeneficiaryRelationMode()->getIsDefault() &&
  82.             $beneficiary->getCollective()->allowAssociatedBeneficiaries()
  83.         );
  84.     }
  86.     /**
  87.      * @param Beneficiary $beneficiary
  88.      * @param User $user
  89.      * @return bool
  90.      */
  91.     private function canShow(Beneficiary $beneficiary, User $user): bool
  92.     {
  93.         return ($user->hasRole('ROLE_ATCLIENTE') && $beneficiary->getIsActive());
  94.     }
  95. }