src/Security/Voter/UserVoter.php line 9

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  6. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  7. use Symfony\Component\Security\Core\User\UserInterface;
  9. class UserVoter extends Voter
  10. {
  11. public const EDIT = 'USER_EDIT';
  12. public const VIEW = 'USER_VIEW';
  14. protected function supports(string $attribute, $profil): bool
  15. {
  16. // replace with your own logic
  17. // https://symfony.com/doc/current/security/voters.html
  18. return in_array($attribute, [self::EDIT, self::VIEW])
  19. && $profil instanceof \App\Entity\User;
  20. }
  22. protected function voteOnAttribute(string $attribute, $profil, TokenInterface $token): bool
  23. {
  24. $user = $token->getUser();
  25. // if the user is anonymous, do not grant access
  26. if (!$user instanceof UserInterface) {
  27. return false;
  28. }
  30. // ... (check conditions and return true to grant permission) ...
  31. switch ($attribute) {
  32. case self::EDIT:
  33. // logic to determine if the user can EDIT
  34. // return true or false
  35. return $this->canEdit($profil,$user);
  36. break;
  37. case self::VIEW:
  38. // logic to determine if the user can VIEW
  39. // return true or false
  40. return $this->canView($profil,$user);
  41. break;
  42. }
  44. return false;
  45. }
  47. public function canEdit($profil,$user)
  48. {
  49. //Si le user veux consulter son profil
  50. if($user === $profil){
  51. return true;
  52. }
  54. //Si le user veut consulter le profil d'un client
  55. $commandes = $profil->getCommandes();
  57. foreach ($commandes as $key => $commande) {
  58. //Si le client a déjà passé une commande auprès de ce foodtruck
  59. if(in_array($commande->getService()->getFoodtruck(),$user->getFoodtrucks()->toArray())){
  60. return true;
  61. }
  62. }
  63. }
  65. public function canView($profil,$user)
  66. {
  67. //Si le user veux consulter son profil
  68. if($user === $profil){
  69. return true;
  70. }
  72. //Si le user veut consulter le profil d'un client
  73. $commandes = $profil->getCommandes();
  75. foreach ($commandes as $key => $commande) {
  76. //Si le client a déjà passé une commande auprès de ce foodtruck
  77. if(in_array($commande->getService()->getFoodtruck(),$user->getFoodtrucks()->toArray())){
  78. return true;
  79. }
  80. }
  81. }
  82. }