src/Voters/ProductVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Voters;
  5. use App\Security\SecurityConfig;
  6. use App\Security\User;
  7. use LogicException;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\Security;
  12. class ProductVoter extends Voter
  13. {
  14.     const PRODUCT_MANAGE_LIST = 'product_manage_list';
  15.     const PRODUCT_SHOW_LIST = 'product_show_list';
  16.     const PRODUCT_ADD_EDIT = 'product_add_edit';
  17.     const CATEGORY_ADD_EDIT = 'category_add_edit';
  18.     const PRODUCT_MANAGE_FIELDS = 'product_manage_fields';
  20.     /**
  21.      * @var Security
  22.      */
  23.     private $security;
  25.     public function __construct(Security $security)
  26.     {
  27.         $this->security = $security;
  28.     }
  30.     /**
  31.      * @param $attribute
  32.      * @param $subject
  33.      *
  34.      * @return bool
  35.      */
  36.     protected function supports($attribute, $subject): bool
  37.     {
  38.         return in_array($attribute, [
  39.             self::PRODUCT_MANAGE_LIST,
  40.             self::PRODUCT_SHOW_LIST,
  41.             self::PRODUCT_ADD_EDIT,
  42.             self::CATEGORY_ADD_EDIT,
  43.             self::PRODUCT_MANAGE_FIELDS,
  44.         ], true);
  45.     }
  47.     /**
  48.      * @param $attribute
  49.      * @param $subject
  50.      * @param TokenInterface $token
  51.      *
  52.      * @return bool
  53.      *
  54.      * @throws LogicException
  55.      */
  56.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  57.     {
  58.         $user = $token->getUser();
  59.         if (!$user instanceof User) {
  60.             return false;
  61.         }
  63.         switch ($attribute) {
  64.             case self::PRODUCT_MANAGE_LIST:
  65.                 return $this->canProductManageList();
  66.             case self::PRODUCT_SHOW_LIST:
  67.                 return $this->canProductShowList();
  68.             case self::PRODUCT_ADD_EDIT:
  69.                 return $this->canProductAddEdit();
  70.             case self::CATEGORY_ADD_EDIT:
  71.                 return $this->canCategoryAddEdit();
  72.             case self::PRODUCT_MANAGE_FIELDS:
  73.                 return $this->canProductManageFields();
  74.         }
  76.         throw new LogicException('This should never happen');
  77.     }
  79.     private function canProductManageList(): bool
  80.     {
  81.         return $this->canAccessModuleProduct();
  82.     }
  84.     private function canProductShowList(): bool
  85.     {
  86.         return $this->canAccessModuleProduct();
  87.     }
  89.     private function canProductAddEdit(): bool
  90.     {
  91.         return $this->canAccessModuleProduct();
  92.     }
  94.     private function canCategoryAddEdit(): bool
  95.     {
  96.         return $this->canAccessModuleProduct();
  97.     }
  99.     private function canProductManageFields(): bool
  100.     {
  101.         return $this->canAccessModuleProduct();
  102.     }
  104.     private function canAccessModuleProduct(): bool
  105.     {
  106.         return $this->security->isGranted(SecurityConfig::MODULE_PRODUCT);
  107.     }
  108. }