src/Security/Voter/IsOwnerVoter.php line 15

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\AppTrainingUser;
  6. use App\Entity\Establishment;
  7. use App\Entity\Program;
  8. use App\Entity\Session;
  9. use App\Entity\User;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. use Symfony\Component\Security\Core\Security;
  13. use Symfony\Component\Security\Core\User\UserInterface;
  15. class IsOwnerVoter extends Voter
  16. {
  17.     public function __construct(private readonly Security $security)
  18.     {
  19.     }
  22.     protected function supports(string $attribute, $subject): bool
  23.     {
  24.         return $attribute == 'IS_DOCTOR_AND_OWNER';
  25.     }
  27.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  28.     {
  29.         $user = $token->getUser();
  32.         // if the user is anonymous, do not grant access
  33.         if (!$user instanceof UserInterface) {
  34.             return false;
  35.         }
  37.         // si la personne n'est pas docteur, accès interdit
  38.         if (!$this->security->isGranted('ROLE_DOCTOR')) {
  39.             return false;
  40.         }
  43.         if ($subject instanceof Session || $subject instanceof Program) {
  44.             if ($user->getEstablishment() instanceof Establishment) {
  45.                 if ($subject->getEstablishment() === $user->getEstablishment()) {
  46.                     return true;
  47.                 }
  48.             }
  49.         }
  51.         if ($subject instanceof AppTrainingUser) {
  52.             if ($subject->getUser() instanceof User &&
  53.                 $subject->getUser()->getEstablishment() instanceof Establishment &&
  54.                 $subject->getUser()->getEstablishment() === $user->getEstablishment()) {
  55.                 return true;
  56.             }
  57.         }
  60.         return false;
  61.     }
  63. }