src/Security/Voter/CommandOrderVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\User;
  6. use App\Security\NoOriginalTokenException;
  7. use App\Security\OriginalTokenProvider;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\User\UserInterface;
  12. class CommandOrderVoter extends Voter
  13. {
  14.     public const IMPORT = 'command_order_import';
  16.     private $originalTokenProvider;
  18.     public function __construct(OriginalTokenProvider $originalTokenProvider)
  19.     {
  20.         $this->originalTokenProvider = $originalTokenProvider;
  21.     }
  23.     protected function supports($attribute, $subject)
  24.     {
  25.         $currentUser = $this->originalTokenProvider->getCurrentToken()->getUser();
  26.         if (false === $currentUser instanceof UserInterface) {
  27.             return false;
  28.         }
  30.         return self::IMPORT === $attribute;
  31.     }
  33.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  34.     {
  35.         try {
  36.             return $this->voteForOriginalUser($attribute);
  37.         } catch (NoOriginalTokenException $exception) {
  38.             return $this->voteForCurentUser($attribute, $token);
  39.         }
  40.     }
  42.     private function voteForOriginalUser(string $attribute): bool
  43.     {
  44.         $originalUser = $this->originalTokenProvider->getOriginalUser();
  46.         return $this->voteForUser($attribute, $originalUser);
  47.     }
  49.     private function voteForCurentUser(string $attribute, TokenInterface $token): bool
  50.     {
  51.         $currentUSer = $token->getUser();
  52.         if (!$currentUSer instanceof User) {
  53.             return false;
  54.         }
  56.         return $this->voteForUser($attribute, $currentUSer);
  57.     }
  59.     private function voteForUser(string $attribute, UserInterface $user): bool
  60.     {
  61.         if (self::IMPORT === $attribute && $this->canImport($user)) {
  62.             return true;
  63.         }
  65.         return false;
  66.     }
  68.     protected function canImport(UserInterface $user): bool
  69.     {
  70.         return $user->isAnAdmin();
  71.     }
  72. }