src/Security/Voter/FoodtruckVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\User;
  6. use App\Entity\Foodtruck;
  7. use Symfony\Component\Security\Core\Security;
  8. use Symfony\Component\Security\Core\User\UserInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. class FoodtruckVoter extends Voter
  14. {
  15. public const EDIT = 'FOODTRUCK_EDIT';
  16. public const VIEW = 'FOODTRUCK_VIEW';
  17. public const DELETE = 'FOODTRUCK_DELETE';
  19. private $security;
  21. public function __construct(Security $security)
  22. {
  23. $this->security = $security;
  24. }
  25. protected function supports(string $attribute, $foodtruck): bool
  26. {
  27. // replace with your own logic
  28. // https://symfony.com/doc/current/security/voters.html
  29. return in_array($attribute, [self::EDIT, self::VIEW, self::DELETE])
  30. && $foodtruck instanceof \App\Entity\Foodtruck;
  31. }
  33. protected function voteOnAttribute(string $attribute, $foodtruck, TokenInterface $token): bool
  34. {
  35. $user = $token->getUser();
  36. // if the user is anonymous, do not grant access
  37. if (!$user instanceof UserInterface) {
  38. return false;
  39. }
  41. //On vérifie si l'utilisateur est admin
  42. if($this->security->isGranted('ROLE_ADMIN'))
  43. {
  44. return true;
  45. }
  47. // On vérifie si le foodtruck a un propriétaire
  48. if(null === $foodtruck->getUsers()){
  49. return false;
  50. }
  53. // ... (check conditions and return true to grant permission) ...
  54. switch ($attribute) {
  55. case self::EDIT:
  56. // on vérifie si on peut éditer
  57. return $this->canEdit($foodtruck, $user);
  58. break;
  59. case self::VIEW:
  60. // on vérifie si on peut visualiser
  61. return $this->canView($foodtruck, $user);
  62. break;
  63. case self::DELETE:
  64. // on vérifie si on peut supprimer
  65. return $this->canDelete($foodtruck, $user);
  66. break;
  67. }
  69. return false;
  70. }
  72. private function canEdit(Foodtruck $foodtruck, User $user){
  73. // Le propriétaire du foodtruck peut le modifier
  74. // return $user === $foodtruck->getUsers();
  75. return in_array($foodtruck, $user->getFoodtrucks()->getValues());
  76. // if(in_array($foodtruck,$this->getUser()->getFoodtrucks()->getValues()) OR $this->isGranted('ROLE_ADMIN')){
  77. // return true;
  78. // } else {
  79. // return false;
  80. // }
  81. }
  83. private function canView(Foodtruck $foodtruck, User $user){
  84. return in_array($foodtruck, $user->getFoodtrucks()->getValues());
  85. }
  87. private function canDelete(Foodtruck $foodtruck, User $user){
  88. // Le propriétaire du foodtruck peut le supprimer
  89. return in_array($foodtruck, $user->getFoodtrucks()->getValues());
  90. }
  92. }