src/LiteDesk/FinanceBundle/Security/Authorization/DutyTravelVoter.php line 17

Open in your IDE?
  1. <?php
  2. namespace LiteDesk\FinanceBundle\Security\Authorization;
  4. use LiteDesk\UserBundle\Entity\User;
  5. use LiteDesk\FinanceBundle\Entity\DutyTravelOrder;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\AbstractVoter;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  9. use Symfony\Component\Security\Core\User\AdvancedUserInterface;
  10. use JMS\DiExtraBundle\Annotation\Service;
  11. use JMS\DiExtraBundle\Annotation\Tag;
  13. /**
  14.  * @Service("security.access.duty_travel_voter", public=false)
  15.  * @Tag("security.voter")
  16.  */
  17. class DutyTravelVoter extends Voter
  18. {
  19.     const VIEW = 'VIEW';
  20.     const EDIT = 'EDIT';
  21.     const PROMOTE = 'PROMOTE';
  22.     const DEMOTE = 'DEMOTE';
  23.     const DELETE = 'DELETE';
  24.     const TEMPLATE = 'TEMPLATE';
  26.     protected function supports($attribute, $subject)
  27.     {
  28.         if(!in_array($attribute, $this->getSupportedAttributes()))
  29.         {
  30.             return false;
  31.         }
  33.         if(!($subject instanceof DutyTravelOrder))
  34.         {
  35.             return false;
  36.         }
  38.         return true;
  39.     }
  41.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  42.     {
  43.         $user = $token->getUser();
  45.         /* @var $dutyTravelOrder DutyTravelOrder */
  47.         // make sure there is a user object (i.e. that the user is logged in)
  48.         if (!$user instanceof AdvancedUserInterface) {
  49.             return false;
  50.         }
  52.         // double-check that the User object is the expected entity (this
  53.         // only happens when you did not configure the security system properly)
  54.         if (!$user instanceof User) {
  55.             throw new \LogicException('The user is somehow not our User class!');
  56.         }
  58.         switch($attribute) {
  59.             case self::VIEW:
  60.                 return $subject->getAuthor()->getId() == $user->getId();
  61.                 break;
  62.             case self::EDIT:
  63.                 return $subject->getAuthor()->getId() == $user->getId();
  64.                 break;
  65.             case self::DELETE:
  66.                 return $subject->getAuthor()->getId() == $user->getId();
  67.                 break;
  68.             case self::TEMPLATE:
  69.                 return $subject->getAuthor()->getId() == $user->getId();
  70.                 break;
  71.         }
  73.         return false;
  74.     }
  77.     protected function getSupportedAttributes()
  78.     {
  79.         return array(self::VIEW, self::EDIT, self::PROMOTE, self::DELETE, self::DEMOTE, self::TEMPLATE);
  80.     }
  81. }