src/Security/Authorization/Voter/PriceGroupVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security\Authorization\Voter;
  5. use App\Entity\CompanySalesPriceGroup;
  6. use App\Entity\PriceGroup;
  7. use App\Entity\User;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. class PriceGroupVoter extends Voter
  12. {
  13.     const CREATE  = 'create';
  14.     const READ    = 'read';
  15.     const UPDATE  = 'update';
  16.     const DELETE  = 'delete';
  18.     /**
  19.      * {@inheritDoc}
  20.      */
  21.     protected function supports($attribute, $subject)
  22.     {
  23.         $attributes = [
  24.             self::CREATE,
  25.             self::READ,
  26.             self::UPDATE,
  27.             self::DELETE,
  28.         ];
  29.         if (!in_array($attribute, $attributes)) {
  30.             return false;
  31.         }
  32.         if (!$subject instanceof PriceGroup) {
  33.             return false;
  34.         }
  36.         return true;
  37.     }
  39.     /**
  40.      * {@inheritDoc}
  41.      */
  42.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  43.     {
  44.         $user = $token->getUser();
  45.         if (!$user instanceof User) {
  46.             return false;
  47.         }
  48.         if (!$subject instanceof CompanySalesPriceGroup) {
  49.             return false;
  50.         }
  52.         switch ($attribute) {
  53.             case self::CREATE:
  54.             case self::UPDATE:
  55.             case self::DELETE:
  56.                 if ($user->isSuperAdmin()) {
  57.                     return true;
  58.                 }
  59.                 break;
  60.             case self::READ:
  61.                 return true;
  62.                 break;
  63.         }
  65.         return false;
  66.     }
  67. }