src/TSMS/TradeBundle/Security/Voter/CanEditDeleteFileVoter.php line 19

Open in your IDE?
  1. <?php
  2. /**
  3. * Copyright (C) SUEZ Smart Solutions - All Rights Reserved
  4. * On’Connect Gateway Management, 2018
  5. * Unauthorized copying of this file, via any medium is strictly prohibited
  6. * Proprietary and confidential
  7. * For the full copyright and license information, please report to the LICENSE CONTRACT.
  8. */
  10. namespace TSMS\TradeBundle\Security\Voter;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  14. use TSMS\CoreBundle\Entity\User;
  16. /**
  17.  * Class CanEditDeleteFileVoter.
  18.  */
  19. class CanEditDeleteFileVoter implements VoterInterface
  20. {
  21.     const DOCUMENT_CAN_EDIT_DELETE_FILE = 'DOCUMENT_CAN_EDIT_DELETE_FILE';
  23.     /**
  24.      * {@inheritdoc}
  25.      */
  26.     public function supportsAttribute($attribute)
  27.     {
  28.         return in_array($attribute, [self::DOCUMENT_CAN_EDIT_DELETE_FILE]);
  29.     }
  31.     /**
  32.      * {@inheritdoc}
  33.      */
  34.     public function supportsClass($class)
  35.     {
  36.         $supportedClass = 'TSMS\TradeBundle\Entity\File';
  38.         return $supportedClass === $class || is_subclass_of($class, $supportedClass);
  39.     }
  41.     /**
  42.      * @param TokenInterface $token
  43.      * @param $file
  44.      * @param array $attributes
  45.      *
  46.      * @return int
  47.      */
  48.     public function vote(TokenInterface $token, $file, array $attributes)
  49.     {
  50.         // If $file is no a file, skip.
  51.         if (null === $file) {
  52.             return VoterInterface::ACCESS_ABSTAIN;
  53.         }
  55.         if (!$this->supportsClass(get_class($file))) {
  56.             return VoterInterface::ACCESS_ABSTAIN;
  57.         }
  59.         /** @var User $user */
  60.         $user = $token->getUser();
  62.         // If user is super-administrator, deletion is granted
  63.         if ($user->hasRole('ROLE_ADMIN_TSMS') || $user->hasRole('ROLE_ADMIN_PERIMETER')) {
  64.             return VoterInterface::ACCESS_GRANTED;
  65.         }
  67.         $authorId = (int) $file->getMetadataValue('author_id');
  69.         // If current user authored document, deletion is granted
  70.         if ($authorId === $user->getId()) {
  71.             return VoterInterface::ACCESS_GRANTED;
  72.         }
  74.         // All other cases: deletion denied
  75.         return VoterInterface::ACCESS_DENIED;
  76.     }
  77. }