src/Security/Voter/ModeratorVoter.php line 19

Open in your IDE?
  1. <?php
  2. /*
  3.  * @since 1.0.0
  4.  * @copyright Copyright (C) 2020 ArtMedia. All rights reserved.
  5.  * @website http://artmedia.biz.pl
  6.  * @author Arkadiusz Tobiasz
  7.  * @email kontakt@artmedia.biz.pl
  8.  */
  10. namespace App\Security\Voter;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  14. use Symfony\Component\Security\Core\Security;
  15. use Symfony\Component\Security\Core\User\UserInterface;
  16. use App\Settings\SettingsManager;
  17. use Doctrine\ORM\EntityManagerInterface;
  19. class ModeratorVoter extends Voter
  20. {
  21.     private $security;
  22.     private $settingsManager;
  24.     public function __construct(
  25.         Security $security,
  26.         SettingsManager $settingsManager
  27.     )
  28.     {
  29.         $this->security = $security;
  30.         $this->settingsManager = $settingsManager;
  31.     }
  33.     protected function supports($attribute, $subject)
  34.     {
  35.         $actions = [
  36.             SettingsManager::ADMIN_VIEW_PRIVATE_FIELDS,
  37.             SettingsManager::ADMIN_TOP_UP_BALANCE,
  38.             SettingsManager::ADMIN_EDIT_USER,
  39.             SettingsManager::ADMIN_EDIT_PROFILE,
  40.             SettingsManager::ADMIN_PAYOUTS,
  41.         ];
  43.         return in_array($attribute, ['ROLE_MODERATOR_PERMISSION'])
  44.             && (
  45.                 (is_array($subject) && count(array_intersect($subject, $actions))) || 
  46.                 (is_string($subject) && in_array($subject, $actions))
  47.             )
  48.         ;
  49.     }
  51.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  52.     {
  53.         $user = $token->getUser();
  55.         // if the user is anonymous, do not grant access
  56.         if (!$user instanceof UserInterface) {
  57.             return false;
  58.         }
  60.         if (!is_array($subject)) {
  61.             $actions = [
  62.                 $subject,
  63.             ];
  64.         } else {
  65.             $actions = $subject;
  66.         }
  68.         $configs = $this->settingsManager->get($actions, true);
  69.         $groups = [];
  70.         foreach ($configs as $item) {
  71.             $item = json_decode($item, true);
  72.             if ($item) {
  73.                 $groups = array_merge($groups, $item);
  74.             }
  75.         }
  77.         if (!$groups) {
  78.             return false;
  79.         }
  81.         array_unique($groups);
  83.         // Allow if user match
  84.         return count($user->getGroups($groups)) ? true : false;
  85.     }
  86. }