src/Security/SimpleVoter.php line 12

Open in your IDE?
  1. <?php
  2. //----------------------------------------------------------------------
  3. // src/Security/SimpleVoter.php
  4. //----------------------------------------------------------------------
  6. namespace App\Security;
  8. use App\Entity\Access;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. class SimpleVoter extends Voter
  13. {
  14.     //--------------------------------------------------------------------------------
  15.     const OPEN_SESAME = "open_sesame";
  16.     //--------------------------------------------------------------------------------
  17.     const ACCESS_BUDGET = "access_budget";
  18.     const ACCESS_READING = "access_reading";
  19.     const ACCESS_STASH = "access_stash";
  20.     const ACCESS_TRACKING = "access_tracking";
  21.     const ACCESS_VEHICLE = "access_vehicle";
  22.     //--------------------------------------------------------------------------------
  23.     const ACCESS_GLOBALS = array(
  24.         self::OPEN_SESAME,
  26.         self::ACCESS_BUDGET,
  27.         self::ACCESS_READING,
  28.         self::ACCESS_STASH,
  29.         self::ACCESS_TRACKING,
  30.         self::ACCESS_VEHICLE,
  31.     );
  32.     //--------------------------------------------------------------------------------
  34.     protected function supports(string $attribute, $subject): bool
  35.     {
  36.         // if the attribute isn't one we support, return false
  37.         if (!in_array($attribute, self::ACCESS_GLOBALS))
  38.         {
  39.             return false;
  40.         }
  42.         // only vote on Post objects
  43.         // if (!$subject instanceof Post)
  44.         // {
  45.         //     return false;
  46.         // }
  48.         return true;
  49.     }
  51.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  52.     {
  53.         $user = $token->getUser();
  55.         if (!$user instanceof Access)
  56.         {
  57.             // the user must be logged in; if not, deny access
  58.             return false;
  59.         }
  61.         // The user must be the owner of the object
  62.         if ($subject !== null)
  63.         {
  64.             $owner = $subject->getOwner();
  65.             if ($owner === null)
  66.                 return false;
  67.             if (!$owner->equals($user))
  68.                 return false;
  69.         }
  71.         switch ($attribute)
  72.         {
  73.             case self::OPEN_SESAME:
  74.                 return $this->canOpenSesame($user);
  75.             case self::ACCESS_BUDGET:
  76.                 return $this->canAccessBudget($user, $subject);
  77.             case self::ACCESS_READING:
  78.                 return $this->canAccessReading($user, $subject);
  79.             case self::ACCESS_STASH:
  80.                 return $this->canAccessStash($user, $subject);
  81.             case self::ACCESS_TRACKING:
  82.                 return $this->canAccessTracking($user, $subject);
  83.             case self::ACCESS_VEHICLE:
  84.                 return $this->canAccessVehicle($user, $subject);
  85.         }
  87.         throw new \LogicException('This code should not be reached!');
  88.     }
  90.     private function canOpenSesame(Access $user): bool
  91.     {
  92.         if ($user->getId() === 2)
  93.         {
  94.             return true;
  95.         }
  96.         return false;
  97.     }
  99.     private function canAccessBudget(Access $user, $subject): bool
  100.     {
  101.         return true;
  102.     }
  104.     private function canAccessReading(Access $user, $subject): bool
  105.     {
  106.         return true;
  107.     }
  109.     private function canAccessStash(Access $user, $subject): bool
  110.     {
  111.         return true;
  112.     }
  114.     private function canAccessTracking(Access $user, $subject): bool
  115.     {
  116.         return true;
  117.     }
  119.     private function canAccessVehicle(Access $user, $subject): bool
  120.     {
  121.         return true;
  122.     }
  123. }