src/TSMS/TradeBundle/Security/Voter/FolderTreeVoter.php line 16

Open in your IDE?
  1. <?php
  2. /**
  3. * Copyright (C) SUEZ Smart Solutions - All Rights Reserved
  4. * On’Connect Gateway Management, 2018
  5. * Unauthorized copying of this file, via any medium is strictly prohibited
  6. * Proprietary and confidential
  7. * For the full copyright and license information, please report to the LICENSE CONTRACT.
  8. */
  10. namespace TSMS\TradeBundle\Security\Voter;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  15. /**@todo check use / delete  */
  16. class FolderTreeVoter implements VoterInterface
  17. {
  18.     const DOCUMENT_IS_FOLDER_TREE_CORRECT = 'DOCUMENT_IS_FOLDER_TREE_CORRECT';
  20.     /**
  21.      * {@inheritdoc}
  22.      */
  23.     public function supportsAttribute($attribute)
  24.     {
  25.         return in_array($attribute, [self::DOCUMENT_IS_FOLDER_TREE_CORRECT]);
  26.     }
  28.     /**
  29.      * {@inheritdoc}
  30.      */
  31.     public function supportsClass($class)
  32.     {
  33.         return is_array($class) && isset($class['foldersId']) && isset($class['folderPath']) && isset($class['contractId']);
  34.     }
  36.     /**
  37.      * @param TokenInterface $token
  38.      * @param null|object    $object
  39.      * @param array          $attributes
  40.      *
  41.      * @return int
  42.      */
  43.     public function vote(TokenInterface $token, $object, array $attributes)
  44.     {
  45.         // check if the class of this object is supported by this voter
  46.         if (!$this->supportsClass($object)) {
  47.             return VoterInterface::ACCESS_ABSTAIN;
  48.         }
  50.         // check if the voter is used correctly, only allow one attribute
  51.         // this isn't a requirement, it's just one easy way for you to
  52.         // design your voter
  53.         if (1 !== count($attributes)) {
  54.             throw new \InvalidArgumentException(
  55.                 'Only one attribute is allowed for DOCUMENT_IS_FOLDER_TREE_CORRECT'
  56.             );
  57.         }
  59.         // set the attribute to check against
  60.         $attribute = $attributes[0];
  62.         // check if the given attribute is covered by this voter
  63.         if (!$this->supportsAttribute($attribute)) {
  64.             return VoterInterface::ACCESS_ABSTAIN;
  65.         }
  67.         switch ($attribute) {
  68.             case self::DOCUMENT_IS_FOLDER_TREE_CORRECT:
  69.                 $isSameContract = intval($object['contractId']) === intval(end($object['folderPath'])['contract']);
  70.                 $isTreeCorrect  = true;
  71.                 foreach ($object['foldersId'] as $depth => $folderId) {
  72.                     if (
  73.                         !isset($object['folderPath'][$depth]) ||
  74.                         $object['folderPath'][$depth]['parentId'] !== $folderId
  75.                     ) {
  76.                         $isTreeCorrect = false;
  77.                     }
  78.                 }
  80.                 if ($isSameContract && $isTreeCorrect) {
  81.                     return VoterInterface::ACCESS_GRANTED;
  82.                 }
  83.                 break;
  84.         }
  86.         return VoterInterface::ACCESS_DENIED;
  87.     }
  88. }