src/Access/Security/Voter/AccessVoter.php line 13

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Access\Security\Voter;
  7. use App\Security\Doctrine\Entity\User;
  8. use App\Security\Security\Store\Roles;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. final class AccessVoter extends Voter
  14. {
  15.     public const DELETE = 'delete';
  16.     public const SUSPEND = 'suspend';
  17.     public const ACTIVATE = 'activate';
  19.     public function __construct(private AccessDecisionManagerInterface $accessDecisionManager)
  20.     {
  21.     }
  23.     protected function supports(string $attribute, mixed $subject): bool
  24.     {
  25.         if (!$subject instanceof User) {
  26.             return false;
  27.         }
  29.         return in_array($attribute, [self::DELETE, self::SUSPEND, self::ACTIVATE], true);
  30.     }
  32.     protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
  33.     {
  34.         if (!$subject instanceof User) {
  35.             return false;
  36.         }
  38.         return match ($attribute) {
  39.             self::DELETE => $token->getUser() !== $subject
  40.                     && $this->accessDecisionManager->decide($token, [Roles::ACCESS_DELETE], $subject),
  41.             self::SUSPEND => $token->getUser() !== $subject
  42.                     && !$subject->isSuspended()
  43.                     && $this->accessDecisionManager->decide($token, [Roles::ACCESS_SUSPEND], $subject),
  44.             self::ACTIVATE => $token->getUser() !== $subject
  45.                     && $subject->isSuspended()
  46.                     && $this->accessDecisionManager->decide($token, [Roles::ACCESS_ACTIVATE], $subject),
  47.             default => false // @codeCoverageIgnore
  48.         };
  49.     }
  50. }