src/Security/Voter/Scholar/Front/ModuleVoter.php line 21

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the nellapp package.
  5.  *
  6.  * (c) Benjamin Georgeault
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace App\Security\Voter\Scholar\Front;
  14. use App\Entity\Scholar\Module\Module;
  15. use App\Entity\Scholar\Training\Training;
  16. use App\Service\Scholar\ScholarNavigationSecurityService;
  17. use Nellapp\Bundle\SDKBundle\Auth\Entity\UserInterface;
  18. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  19. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  21. class ModuleVoter implements VoterInterface
  22. {
  23.     public function __construct(
  24.         private ScholarNavigationSecurityService $scholarNavigationSecurityService,
  25.     )
  26.     {
  27.     }
  29.     private function isSubjectValid($subject): bool
  30.     {
  31.         if (!is_array($subject)) {
  32.             return false;
  33.         }
  35.         if (
  36.             !array_key_exists('training', $subject)
  37.             || !array_key_exists('module', $subject)
  38.             || array_key_exists('lesson', $subject)
  39.         ) {
  40.             return false;
  41.         }
  43.         $training = $subject['training'];
  44.         $module = $subject['module'];
  46.         return $training instanceof Training && $module instanceof Module;
  47.     }
  49.     public function vote(TokenInterface $token, $subject, array $attributes): int
  50.     {
  51.         $user = $token->getUser();
  52.         if (!$user instanceof UserInterface) {
  53.             return false;
  54.         }
  56.         if (!$this->isSubjectValid($subject)) {
  57.             return self::ACCESS_ABSTAIN;
  58.         }
  60.         if (!in_array('FRONT_ACCESS', $attributes)) {
  61.             return self::ACCESS_ABSTAIN;
  62.         }
  64.         return $this->scholarNavigationSecurityService->canAccessModule(
  65.             $subject['training'],
  66.             $subject['module'],
  67.         ) ? self::ACCESS_GRANTED : self::ACCESS_DENIED;
  68.     }
  69. }