src/Security/Voter/MainVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\Campus;
  6. use App\Entity\User;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  9. use Symfony\Component\Security\Core\User\UserInterface;
  10. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  11. use Symfony\Component\Security\Core\Security;
  13. class MainVoter extends Voter
  14. {
  15.     private $session;
  16.     private $security;
  17.     public function __construct(SessionInterface $sessionInterface, Security $security)
  18.     {
  19.         $this->security = $security;
  20.         $this->session = $sessionInterface;
  21.     }
  22.     protected function supports($attribute, $subject)
  23.     {
  24.         if(!$this->security->getUser())
  25.             return false;
  26.         if(in_array("ROLE_STUDENT", $this->security->getUser()->getRoles()))
  27.         return false;
  28.        
  29.         $permission = $this->session->get("PERMISSION");
  30.         if ($this->security->getUser() &&  in_array("SUPER_ADMIN", $this->security->getUser()->getRoles()))
  31.             return true;
  32.         if (!$permission)
  33.             $permission = array();
  35.         return in_array($attribute, $permission);
  36.     }
  38.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  39.     {
  40.        
  41.       
  42.         $user = $token->getUser();
  43.         // if the user is anonymous, do not grant access
  44.        
  45.         if (in_array("SUPER_ADMIN", $user->getRoles()))
  46.             return true;
  49.         switch ($attribute) {
  51.             case 'dorm_plc_own':
  52.             case 'drm_plc_own':
  53.             case 'drm_plc_sng_own':
  54.             case 'drm_edt_blck_own':
  55.             case 'drm_shw_blck_own':
  56.             case 'drm_stdt_lst_own':
  57.             case 'drm_stdt_vw_own':
  58.             
  59.                 if ($subject instanceof Campus) {
  60.                     foreach ($user->getDormUsers() as $key => $dormuser) {
  61.                         if ($dormuser->getCampus() == $subject)
  62.                             return true;
  63.                     }
  64.                     return false;
  65.                 }
  66.                 return true;
  67.             case 'drm_usr_own':
  68.                 if ($subject instanceof Campus) {
  69.                     return $user->getUserInfo()->getCampus() == $subject;
  70.                 }
  71.                 return true;
  73.             case 'dorm_sum_view_own':
  74.                 if ($subject instanceof Campus) {
  75.                     foreach ($user->getDormUsers() as $key => $dormuser) {
  76.                         if ($dormuser->getCampus() == $subject)
  77.                             return true;
  78.                     }
  79.                     return false;
  80.                 }
  81.                 return true;
  83.                 // logic to determine if the user can EDIT
  84.                 // return true or false
  85.                 break;
  86.             case 'POST_VIEW':
  87.                 // logic to determine if the user can VIEW
  88.                 // return true or false
  89.                 break;
  90.         }
  91.         return true;
  92.     }
  93. }