src/Security/Voter/DiaporamaVoter.php line 11

Open in your IDE?
  1. <?php
  2. namespace App\Security\Voter;
  3. use App\Entity\Etablissement;
  4. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  5. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  6. use Symfony\Component\Security\Core\Security;
  7. use Symfony\Component\Security\Core\User\UserInterface;
  8. class DiaporamaVoter extends Voter
  9. {
  10.     public const LIST = 'list';
  11.     public const ADD 'add';
  12.     public const EDIT 'edit';
  13.     public const DELETE 'delete';
  14.     public const PRINCIPAL 'principal';
  15.     private $security;
  16.     public function __construct(Security $security)
  17.     {
  18.         $this->security $security;
  19.     }
  20.     protected function supports($attribute$subject): bool
  21.     {
  22.         if ($subject instanceof Etablissement) {
  23.             return \in_array($attribute, [
  24.                     self::ADD,
  25.                     self::EDIT,
  26.                     self::DELETE,
  27.                     self::PRINCIPAL,
  28.                 ], true);
  29.         } else {
  30.             return 'diapoPlus' === $subject &&
  31.                 \in_array($attribute, [self::ADD], true);
  32.         }
  33.     }
  34.     protected function voteOnAttribute($attribute$subjectTokenInterface $token)
  35.     {// Utilisateur doit être authentifié
  36.         if (!$token->getUser() instanceof UserInterface) {
  37.             return false;
  38.         }
  39.         if ($this->security->isGranted('ROLE_ADMIN')) {
  40.             return true;
  41.         }
  42.         switch ($attribute) {
  43.             case self::PRINCIPAL:
  44.             case self::DELETE:
  45.             case self::ADD:
  46.             case self::EDIT:
  47.             return $this->security->isGranted('ROLE_RESPONSABLE_ETABLISSEMENT') ||
  48.                 $this->security->isGranted('ROLE_COMMUNICATION') ||
  49.                 $this->security->isGranted('ROLE_GESTIONNAIRE_ESPACE_ETABLISSEMENT');
  50.         }
  51.         return false;
  52.     }
  53. }