src/Security/Voter/Savills/WorkValidationRequestVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter\Savills;
  5. use App\Entity\Authorization;
  6. use App\Entity\Savills\WorkValidationRequest;
  7. use App\Entity\User;
  8. use App\Manager\Savills\WorkValidationRequestManager;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. use Symfony\Component\Security\Core\Security;
  13. class WorkValidationRequestVoter extends Voter
  14. {
  15.     public const CREATE = 'CAN_CREATE';
  16.     public const READ = 'CAN_READ';
  17.     public const EDIT = 'CAN_EDIT';
  18.     public const DELETE = 'CAN_DELETE';
  20.     private Security $security;
  21.     private WorkValidationRequestManager $workValidationRequestManager;
  23.     public function __construct(Security $security, WorkValidationRequestManager $workValidationRequestManager)
  24.     {
  25.         $this->security = $security;
  26.         $this->workValidationRequestManager = $workValidationRequestManager;
  27.     }
  29.     protected function supports($attribute, $subject): bool
  30.     {
  31.         $supportsAttribute = in_array($attribute, [self::CREATE, self::DELETE, self::EDIT, self::READ]);
  32.         $supportsSubject = $subject instanceof WorkValidationRequest;
  34.         return $supportsAttribute && $supportsSubject;
  35.     }
  37.     /**
  38.      * @param mixed $subject
  39.      */
  40.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  41.     {
  42.         $user = $this->security->getUser();
  43.         if (!$user) {
  44.             return false;
  45.         }
  47.         switch ($attribute) {
  48.             case self::CREATE:
  49.                 return $this->canCreate($subject, $user);
  50.             case self::READ:
  51.                 return $this->canRead($subject, $user);
  52.             case self::EDIT:
  53.                 return $this->canEdit($subject, $user);
  54.             case self::DELETE:
  55.                 return $this->canDelete($subject, $user);
  56.         }
  58.         return false;
  59.     }
  61.     private function canCreate(WorkValidationRequest $workValidationRequest, User $user): bool
  62.     {
  63.         if ($this->security->isGranted(Authorization::ROLE_ADMIN) || $this->security->isGranted(Authorization::ROLE_SAVILLS_TECHNICAL_MANAGER)) {
  64.             return true;
  65.         }
  67.         return false;
  68.     }
  70.     private function canRead(WorkValidationRequest $workValidationRequest, User $user): bool
  71.     {
  72.         if ($this->security->isGranted(Authorization::ROLE_ADMIN)) {
  73.             return true;
  74.         }
  75.         if ($this->security->isGranted(Authorization::ROLE_SAVILLS_RENTAL_MANAGER) || $this->security->isGranted(Authorization::ROLE_SAVILLS_TECHNICAL_ASSISTANT)) {
  76.             if ($user->getCompany()->getId() === $workValidationRequest->getOwnerCompany()->getId()) {
  77.                 return true;
  78.             }
  79.         }
  81.         /*if ($this->security->isGranted(Authorization::ROLE_SERVICE_PROVIDER_ADMIN)) {
  82.             if ($user->getCompany()->getId() === $workValidationRequest->getServiceProviderCompany()->getId()) {
  83.                 return true;
  84.             }
  85.         }*/
  87.         return $this->workValidationRequestManager->hasAccess($workValidationRequest, $this->security->getUser());
  88.     }
  90.     private function canEdit(WorkValidationRequest $workValidationRequest, User $user): bool
  91.     {
  92.         if ($this->security->isGranted(Authorization::ROLE_SAVILLS_RENTAL_MANAGER) || $this->security->isGranted(Authorization::ROLE_SAVILLS_TECHNICAL_ASSISTANT)) {
  93.             if ($user->getCompany()->getId() === $workValidationRequest->getOwnerCompany()->getId()) {
  94.                 return true;
  95.             }
  96.         }
  98.         return $this->canRead($workValidationRequest, $user);
  99.     }
  101.     private function canDelete(workValidationRequest $workValidationRequest, User $user): bool
  102.     {
  103.         if ($this->security->isGranted(Authorization::ROLE_SAVILLS_OWNER_ADMIN)) {
  104.             return true;
  105.         }
  107.         return false;
  108.     }
  109. }