src/TSMS/TradeBundle/Security/Voter/CanEditDeleteFolderVoter.php line 19

Open in your IDE?
  1. <?php
  2. /**
  3. * Copyright (C) SUEZ Smart Solutions - All Rights Reserved
  4. * On’Connect Gateway Management, 2018
  5. * Unauthorized copying of this file, via any medium is strictly prohibited
  6. * Proprietary and confidential
  7. * For the full copyright and license information, please report to the LICENSE CONTRACT.
  8. */
  10. namespace TSMS\TradeBundle\Security\Voter;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  14. use TSMS\CoreBundle\Entity\User;
  16. /**
  17.  * Class CanEditDeleteFolderVoter.
  18.  */
  19. class CanEditDeleteFolderVoter implements VoterInterface
  20. {
  21.     const DOCUMENT_CAN_EDIT_DELETE_FOLDER = 'DOCUMENT_CAN_EDIT_DELETE_FOLDER';
  23.     /**
  24.      * {@inheritdoc}
  25.      */
  26.     public function supportsAttribute($attribute)
  27.     {
  28.         return in_array($attribute, [self::DOCUMENT_CAN_EDIT_DELETE_FOLDER]);
  29.     }
  31.     /**
  32.      * {@inheritdoc}
  33.      */
  34.     public function supportsClass($class)
  35.     {
  36.         $supportedClass = 'TSMS\TradeBundle\Entity\DocumentFolder';
  38.         return $supportedClass === $class || is_subclass_of($class, $supportedClass);
  39.     }
  41.     /**
  42.      * @param TokenInterface $token
  43.      * @param $folder
  44.      * @param array $attributes
  45.      *
  46.      * @return int
  47.      */
  48.     public function vote(TokenInterface $token, $folder, array $attributes)
  49.     {
  50.         if (null === $folder) {
  51.             return VoterInterface::ACCESS_ABSTAIN;
  52.         }
  54.         // If $file is no a file, skip.
  55.         if (!$this->supportsClass(get_class($folder))) {
  56.             return VoterInterface::ACCESS_ABSTAIN;
  57.         }
  58.         if ($folder->getParentId() === 0) {
  59.             return VoterInterface::ACCESS_DENIED;
  60.         }
  61.         /** @var User $user */
  62.         $user = $token->getUser();
  64.         // If user is super-administrator, deletion is granted
  65.         if ($user->hasRole('ROLE_ADMIN_TSMS') || $user->hasRole('ROLE_ADMIN_PERIMETER')) {
  66.             return VoterInterface::ACCESS_GRANTED;
  67.         }
  69.         $authorId = $folder->getMetadataValue('author_id');
  71.         if ((int) $authorId === $user->getId()) {
  72.             return VoterInterface::ACCESS_GRANTED;
  73.         }
  75.         return VoterInterface::ACCESS_DENIED;
  76.     }
  77. }