src/Security/Voter/GalleryPicVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\GalleryPic;
  6. use App\Entity\User;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  9. use Symfony\Component\Security\Core\Security;
  11. class GalleryPicVoter extends Voter
  12. {
  13.     const VIEW     = 'view';
  14.     const EDIT     = 'edit';
  15.     const DELETE   = 'delete';
  16.     const MODERATE = 'moderate';
  17.     const VALIDATE = 'validate';
  19.     private $security;
  21.     public function __construct(Security $security)
  22.     {
  23.         $this->security = $security;
  24.     }
  26.     protected function supports($attribute, $subject)
  27.     {
  28.         if (!in_array($attribute, [self::VIEW, self::EDIT, self::DELETE, self::MODERATE, self::VALIDATE])) {
  29.             return false;
  30.         }
  32.         if (!$subject instanceof GalleryPic) {
  33.             return false;
  34.         }
  36.         return true;
  37.     }
  39.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  40.     {
  41.         $currentUser = $token->getUser();
  43.         if (!$currentUser instanceof User) {
  44.             return false;
  45.         }
  47.         /** @var GalleryPic $picture */
  48.         $picture = $subject;
  50.         if ($this->security->isGranted(User::ROLE_GALLERY_ADMIN)) {
  51.             return true;
  52.         }
  54.         switch ($attribute) {
  55.             case self::VIEW:
  56.                 return $this->canView($picture, $currentUser);
  57.             case self::EDIT:
  58.             case self::DELETE:
  59.                 return $this->canEditOrDelete($picture, $currentUser);
  60.             case self::MODERATE:
  61.                 return $this->canModerate();
  62.             case self::VALIDATE:
  63.                 return $this->canValidate($picture);
  64.         }
  66.         throw new \LogicException('This code should not be reached!');
  67.     }
  69.     private function canView(GalleryPic $picture, User $currentUser): bool
  70.     {
  71.         return $picture->getUser() === $currentUser ||
  72.             GalleryPic::STATUS_PUBLISHED &&
  73.             (
  74.                 !$picture->getFriendsOnly() ||
  75.                 $picture->getUser()->isFriendWith($currentUser)
  76.             );
  77.     }
  79.     private function canEditOrDelete(GalleryPic $picture, User $currentUser): bool
  80.     {
  81.         return $picture->getUser() === $currentUser;
  82.     }
  84.     private function canModerate(): bool
  85.     {
  86.         return $this->security->isGranted(User::ROLE_GALLERY_ADMIN);
  87.     }
  89.     private function canValidate(GalleryPic $picture): bool
  90.     {
  91.         return $this->canModerate() && $picture->getStatus() === GalleryPic::STATUS_MODERATION;
  92.     }
  93. }