src/TSMS/AdminBundle/Security/Authorization/Voter/ContractVoter.php line 18

Open in your IDE?
  1. <?php
  2. /**
  3. * Copyright (C) SUEZ Smart Solutions - All Rights Reserved
  4. * On’Connect Gateway Management, 2018
  5. * Unauthorized copying of this file, via any medium is strictly prohibited
  6. * Proprietary and confidential
  7. * For the full copyright and license information, please report to the LICENSE CONTRACT.
  8. */
  10. namespace TSMS\AdminBundle\Security\Authorization\Voter;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  14. use TSMS\CoreBundle\Entity\Contract;
  15. use TSMS\CoreBundle\Entity\User;
  16. use TSMS\CoreBundle\Manager\PerimeterManager;
  18. class ContractVoter implements VoterInterface
  19. {
  20.     /**
  21.      * @var PerimeterManager
  22.      */
  23.     private $perimeterManager;
  25.     /**
  26.      * ContractVoter constructor.
  27.      *
  28.      * @param PerimeterManager $perimeterManager
  29.      */
  30.     public function __construct(PerimeterManager $perimeterManager)
  31.     {
  32.         $this->perimeterManager = $perimeterManager;
  33.     }
  35.     const VIEW = 'view';
  37.     /**
  38.      * @param string $attribute
  39.      *
  40.      * @return bool
  41.      */
  42.     public function supportsAttribute($attribute)
  43.     {
  44.         return self::VIEW === $attribute;
  45.     }
  47.     /**
  48.      * @param string $class
  49.      *
  50.      * @return bool
  51.      */
  52.     public function supportsClass($class)
  53.     {
  54.         $supportedClass = 'TSMS\CoreBundle\Entity\Contract';
  56.         return $supportedClass === $class || is_subclass_of($class, $supportedClass);
  57.     }
  59.     /**
  60.      * @param TokenInterface $token
  61.      * @param Contract       $contract
  62.      * @param array          $attributes
  63.      */
  64.     public function vote(TokenInterface $token, $contract, array $attributes)
  65.     {
  66.         if (
  67.             !is_object($contract) ||
  68.             (null !== $contract && !$this->supportsClass(get_class($contract)))
  69.         ) {
  70.             return VoterInterface::ACCESS_ABSTAIN;
  71.         }
  73.         if (1 !== count($attributes)) {
  74.             throw new \InvalidArgumentException(
  75.                 'Only one attribute is allowed for VIEW'
  76.             );
  77.         }
  79.         $attribute = $attributes[0];
  80.         if (!$this->supportsAttribute($attribute)) {
  81.             return VoterInterface::ACCESS_ABSTAIN;
  82.         }
  84.         /** @var User $user */
  85.         $user                  = $token->getUser();
  86.         $administeredContracts = $user->getContracts();
  87.         $userPerimeters        = $user->getPerimeters();
  89.         if ($userPerimeters) {
  90.             $perimeterManager = $this->perimeterManager;
  92.             $perimeters = [];
  93.             foreach ($userPerimeters as $perimeter) {
  94.                 $perimeters = array_merge($perimeters, $this->perimeterManager->getChildrenPerimeterCodes($perimeter));
  95.                 $perimeters[] = $perimeter->getPerimeterCode();
  96.             }
  98.             $administeredContracts = array_filter(
  99.                 $administeredContracts->toArray(),
  100.                 function (Contract $contract) use ($perimeters) {
  101.                     // check if perimeter not found
  102.                     if (null == $contract->getPerimeter()) {
  103.                         return false;
  104.                     }
  106.                     return in_array($contract->getPerimeter()->getPerimeterCode(), $perimeters);
  107.                 }
  108.             );
  109.         }
  111.         foreach ($administeredContracts as $administeredContract) {
  112.             if ($administeredContract->getId() === $contract->getId()) {
  113.                 return VoterInterface::ACCESS_GRANTED;
  114.             }
  115.         }
  117.         return VoterInterface::ACCESS_DENIED;
  118.     }
  119. }