src/Security/SimpleVoter.php line 12

Open in your IDE?
  1. <?php
  2. //----------------------------------------------------------------------
  3. // src/Security/SimpleVoter.php
  4. //----------------------------------------------------------------------
  6. namespace App\Security;
  8. use App\Entity\Access;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. class SimpleVoter extends Voter
  13. {
  14.     //--------------------------------------------------------------------------------
  15.     const OPEN_SESAME = "open_sesame";
  16.     //--------------------------------------------------------------------------------
  17.     const ACCESS_BUDGET = "access_budget";
  18.     const ACCESS_READING = "access_reading";
  19.     const ACCESS_TRACKING = "access_tracking";
  20.     const ACCESS_VEHICLE = "access_vehicle";
  21.     //--------------------------------------------------------------------------------
  22.     const ACCESS_GLOBALS = array(
  23.         self::OPEN_SESAME,
  25.         self::ACCESS_BUDGET,
  26.         self::ACCESS_READING,
  27.         self::ACCESS_TRACKING,
  28.         self::ACCESS_VEHICLE,
  29.     );
  30.     //--------------------------------------------------------------------------------
  32.     protected function supports(string $attribute, $subject): bool
  33.     {
  34.         // if the attribute isn't one we support, return false
  35.         if (!in_array($attribute, self::ACCESS_GLOBALS))
  36.         {
  37.             return false;
  38.         }
  40.         // only vote on Post objects
  41.         // if (!$subject instanceof Post)
  42.         // {
  43.         //     return false;
  44.         // }
  46.         return true;
  47.     }
  49.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  50.     {
  51.         $user = $token->getUser();
  53.         if (!$user instanceof Access)
  54.         {
  55.             // the user must be logged in; if not, deny access
  56.             return false;
  57.         }
  59.         // The user must be the owner of the object
  60.         if ($subject !== null)
  61.         {
  62.             $owner = $subject->getOwner();
  63.             if ($owner === null)
  64.                 return false;
  65.             if (!$owner->equals($user))
  66.                 return false;
  67.         }
  69.         switch ($attribute)
  70.         {
  71.             case self::OPEN_SESAME:
  72.                 return $this->canOpenSesame($user);
  73.             case self::ACCESS_BUDGET:
  74.                 return $this->canAccessBudget($user, $subject);
  75.             case self::ACCESS_READING:
  76.                 return $this->canAccessReading($user, $subject);
  77.             case self::ACCESS_TRACKING:
  78.                 return $this->canAccessTracking($user, $subject);
  79.             case self::ACCESS_VEHICLE:
  80.                 return $this->canAccessVehicle($user, $subject);
  81.         }
  83.         throw new \LogicException('This code should not be reached!');
  84.     }
  86.     private function canOpenSesame(Access $user): bool
  87.     {
  88.         if ($user->getId() === 2)
  89.         {
  90.             return true;
  91.         }
  92.         return false;
  93.     }
  95.     private function canAccessBudget(Access $user, $subject): bool
  96.     {
  97.         return true;
  98.     }
  100.     private function canAccessReading(Access $user, $subject): bool
  101.     {
  102.         return true;
  103.     }
  105.     private function canAccessTracking(Access $user, $subject): bool
  106.     {
  107.         return true;
  108.     }
  110.     private function canAccessVehicle(Access $user, $subject): bool
  111.     {
  112.         return true;
  113.     }
  114. }