src/Security/Voter/Scholar/Front/TrainingVoter.php line 21

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the nellapp package.
  5.  *
  6.  * (c) Benjamin Georgeault
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace App\Security\Voter\Scholar\Front;
  14. use App\Entity\Scholar\Training\Training;
  15. use App\Service\Scholar\ScholarNavigationSecurityService;
  16. use Nellapp\Bundle\SDKBundle\Auth\Entity\UserInterface;
  17. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  18. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  21. class TrainingVoter implements VoterInterface
  22. {
  23.     public function __construct(
  24.         private ScholarNavigationSecurityService $scholarNavigationSecurityService,
  25.     )
  26.     {
  27.     }
  29.     private function isSubjectValid($subject): bool
  30.     {
  31.         if (!is_array($subject)) {
  32.             return false;
  33.         }
  35.         if (
  36.             !array_key_exists('training', $subject)
  37.             || array_key_exists('module', $subject)
  38.             || array_key_exists('lesson', $subject)
  39.         ) {
  40.             return false;
  41.         }
  43.         $training = $subject['training'];
  45.         return $training instanceof Training;
  46.     }
  48.     public function vote(TokenInterface $token, $subject, array $attributes): int
  49.     {
  50.         $user = $token->getUser();
  51.         if (!$user instanceof UserInterface) {
  52.             return false;
  53.         }
  55.         if (!$this->isSubjectValid($subject)) {
  56.             return self::ACCESS_ABSTAIN;
  57.         }
  59.         if (!in_array('FRONT_ACCESS', $attributes)) {
  60.             return self::ACCESS_ABSTAIN;
  61.         }
  63.         return $this->scholarNavigationSecurityService
  64.             ->canAccessTraining($subject['training']) ? self::ACCESS_GRANTED : self::ACCESS_DENIED;
  65.     }
  66. }