src/Security/Voter/AdminVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\Account\User;
  6. use App\Entity\Channel\Channel;
  7. use App\Entity\Chat\Conversation;
  8. use App\Service\Account\UserService;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  12. class AdminVoter implements VoterInterface
  13. {
  14.     public function __construct(
  15.         private UserService $userService
  16.     ) {}
  18.     public function vote(TokenInterface $token, $subject, array $attributes): int
  19.     {
  20.         if (!in_array('NIM_ADMIN', $attributes)) {
  21.             return VoterInterface::ACCESS_ABSTAIN;
  22.         }
  24.         /** @var User $user */
  25.         $user = $token->getUser();
  26.         if ($subject instanceof Channel) {
  27.             return $this->accessForChannel($subject, $user);
  28.         } else if ($subject instanceof Conversation) {
  29.             return $this->accessForConversation($subject, $user);
  30.         }
  31.         return VoterInterface::ACCESS_DENIED;
  32.     }
  34.     private function accessForConversation(Conversation $conversation, User $user): int
  35.     {
  36.         if ($this->userService->isAdminForConversation($user, $conversation)) {
  37.             return VoterInterface::ACCESS_GRANTED;
  38.         }
  40.         return VoterInterface::ACCESS_DENIED;
  41.     }
  43.     private function accessForChannel(Channel $channel, User $user): int
  44.     {
  45.         if ($this->userService->isCoordinator($user, $channel)) {
  46.             return VoterInterface::ACCESS_GRANTED;
  47.         }
  49.         $channelUserData = $user->getChannelUserDataByChannel($channel);
  50.         if (!$channelUserData) {
  51.             return VoterInterface::ACCESS_DENIED;
  52.         }
  54.         if ($channelUserData->isLearner() === false) {
  55.             return VoterInterface::ACCESS_GRANTED;
  56.         }
  58.         return VoterInterface::ACCESS_DENIED;
  59.     }
  60. }