src/Security/EmployeeVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use App\Entity\Employee;
  6. use App\Entity\User;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  9. use Symfony\Component\Security\Core\Security;
  10. use Symfony\Component\Security\Core\User\InMemoryUser;
  11. use Symfony\Component\Security\Core\User\UserCheckerInterface;
  13. class EmployeeVoter extends Voter
  14. {
  15.     // these strings are just invented: you can use anything
  16.     const VIEW = 'view';
  18.     private $security;
  20.     public function __construct(Security $security)
  21.     {
  22.         $this->security = $security;
  23.     }
  25.     /**
  26.      * @inheritDoc
  27.      */
  28.     protected function supports(string $attribute, $subject)
  29.     {
  30.         // if the attribute isn't one we support, return false
  31.         if (!in_array($attribute, [self::VIEW]))
  32.             return false;
  34.         // only vote on `Post` objects
  35.         if (!$subject instanceof Employee)
  36.             return false;
  38.         return true;
  39.     }
  41.     /**
  42.      * @inheritDoc
  43.      */
  44.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token)
  45.     {
  46.         if ($this->security->isGranted('ROLE_SUPER_ADMIN'))
  47.             return true;
  49.         if ($this->security->isGranted('ROLE_ADMIN'))
  50.             return true;
  52.         /** @var User $user */
  53.         $user = $token->getUser();
  54.         if (!$user instanceof User)
  55.             return false;
  57.         // you know $subject is a Post object, thanks to `supports()`
  58.         /** @var Employee $employee */
  59.         $employee = $subject;
  60.         switch ($attribute) {
  61.             case self::VIEW:
  62.                 $userVisiblitaUnitaOrganizzativa = $user->getVisibilitaUnitaOrganizzativa();
  63.                 $employeeAttualeUnitaOrganizzativa = $employee->getAttualeUnitaOrganizzativa();
  64.                 if (str_contains($employeeAttualeUnitaOrganizzativa, $userVisiblitaUnitaOrganizzativa))
  65.                     return true;
  66.                 return false;
  67.         }
  69.         throw new \LogicException('This code should not be reached!');
  70.     }
  71. }