src/Security/Voter/CompanyVoter.php line 15

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\Authorization;
  6. use App\Entity\Company;
  7. use App\Entity\Group;
  8. use App\Entity\RealEstate;
  9. use App\Entity\User;
  10. use App\Manager\CompanyManager;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. use Symfony\Component\Security\Core\Security;
  15. class CompanyVoter extends Voter
  16. {
  17.     public const CREATE = 'CAN_CREATE';
  18.     public const READ = 'CAN_READ';
  19.     public const EDIT = 'CAN_EDIT';
  20.     public const DELETE = 'CAN_DELETE';
  22.     public function __construct(
  23.         private Security $security,
  24.         private CompanyManager $companyManager
  25.     ) {
  26.     }
  28.     protected function supports($attribute, $subject): bool
  29.     {
  30.         $supportsAttribute = in_array($attribute, [self::CREATE, self::DELETE, self::EDIT, self::READ]);
  31.         $supportsSubject = $subject instanceof Company;
  33.         return $supportsAttribute && $supportsSubject;
  34.     }
  36.     /**
  37.      * @param mixed $subject
  38.      */
  39.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  40.     {
  41.         $user = $this->security->getUser();
  42.         if (!$user) {
  43.             return false;
  44.         }
  46.         switch ($attribute) {
  47.             case self::CREATE:
  48.                 return $this->canCreate($subject, $user);
  49.             case self::READ:
  50.                 return $this->canRead($subject, $user);
  51.             case self::EDIT:
  52.                 return $this->canEdit($subject, $user);
  53.             case self::DELETE:
  54.                 return $this->canDelete($subject, $user);
  55.         }
  57.         return false;
  58.     }
  60.     private function canCreate(Company $company, User $user): bool
  61.     {
  62.         if ($this->security->isGranted(Authorization::ROLE_ADMIN)) {
  63.             return true;
  64.         }
  66.         return false;
  67.     }
  69.     private function canRead(Company $company, User $user): bool
  70.     {
  71.         if ($this->security->isGranted(Authorization::ROLE_ADMIN)) {
  72.             return true;
  73.         }
  75.         if ($this->security->isGranted(Authorization::ROLE_OWNER_ADMIN)) {
  76.             if (Company::CUSTOMER_TYPE_SERVICE_PROVIDER == $company->getCustomerType()) {
  77.                 return true;
  78.             }
  79.         }
  81.         if ($this->security->isGranted(Authorization::ROLE_SERVICE_PROVIDER_ADMIN)) {
  82.             if (Company::CUSTOMER_TYPE_OWNER == $company->getCustomerType()) {
  83.                 return true;
  84.             }
  85.         }
  87.         return $this->companyManager->hasAccess($company, $user);
  88.     }
  90.     /**
  91.      * Only owner can edit,
  92.      *  as owner admin, we need the same company
  93.      *  as simple owner, the real estate must be in the list of our realestate.
  94.      *
  95.      * @param RealEstate $realEstate
  96.      */
  97.     private function canEdit(Company $company, User $user): bool
  98.     {
  99.         if ($this->security->isGranted(Authorization::ROLE_ADMIN)) {
  100.             return true;
  101.         }
  103.         // as a owner,we must at least have the same company of the realEstate
  104.         if ($user->getCompany()->getId() !== $company->getId()) {
  105.             return false;
  106.         }
  108.         if (
  109.             $this->security->isGranted(Authorization::ROLE_OWNER_ADMIN)
  110.             || $this->security->isGranted(Authorization::ROLE_SERVICE_PROVIDER_ADMIN)
  111.         ) {
  112.             return true;
  113.         }
  115.         return false;
  116.     }
  118.     private function canDelete(Group $group, User $user): bool
  119.     {
  120.         return $this->canEdit($group, $user);
  121.     }
  122. }