src/Security/Voter/Purchase/PurchaseInvoiceVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter\Purchase;
  5. use App\Entity\Purchase\PurchaseInvoice;
  6. use App\Entity\Security\User;
  7. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\User\UserInterface;
  12. class PurchaseInvoiceVoter extends Voter
  13. {
  15.     private $session;
  17.     public function __construct(SessionInterface $session)
  18.     {
  19.         $this->session = $session;
  20.     }
  22.     protected function supports($attribute, $subject)
  23.     {
  24.         // replace with your own logic
  25.         // https://symfony.com/doc/current/security/voters.html
  26.         if (!in_array($attribute, [
  27.             'ROLE_PURCHASE_INVOICE_CREATE',
  28.             'ROLE_PURCHASE_INVOICE_VIEW',
  29.             'ROLE_PURCHASE_INVOICE_EDIT',
  30.             'ROLE_PURCHASE_INVOICE_DELETE',
  31.             'ROLE_PURCHASE_INVOICE_ENABLE',
  32.             'ROLE_PURCHASE_INVOICE_DISABLE',
  33.             'ROLE_PURCHASE_INVOICE_ARCHIVE',
  34.             'ROLE_PURCHASE_INVOICE_NOT_ARCHIVE',
  35.             
  36.             'ROLE_PURCHASE_INVOICE_ATTACHMENT',
  37.             'ROLE_PURCHASE_INVOICE_SETTLEMENT'
  38.             ])) {
  39.             return false;
  40.         }
  42.         // only vote on `Activity` objects
  43.         if (!$subject instanceof PurchaseInvoice) {
  44.             return false;
  45.         }
  47.         return true;
  48.     }
  50.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  51.     {
  52.         $user = $token->getUser();
  53.         // if the user is anonymous, do not grant access
  54.         if (!$user instanceof UserInterface) {
  55.             return false;
  56.         }
  58.         // ... (check conditions and return true to grant permission) ...
  59.         switch ($attribute) {
  60.             case 'ROLE_PURCHASE_INVOICE_CREATE':
  61.                 return $this->canCreate();
  62.                 break;
  63.             case 'ROLE_PURCHASE_INVOICE_VIEW':
  64.                 return $this->canView();
  65.                 break;
  66.             case 'ROLE_PURCHASE_INVOICE_EDIT':
  67.                 return $this->canEdit($subject, $user);
  68.                 break;
  69.             case 'ROLE_PURCHASE_INVOICE_DELETE':
  70.                 return $this->canDelete($subject, $user);
  71.                 break;
  72.             case 'ROLE_PURCHASE_INVOICE_ENABLE':
  73.                 return $this->canEnable($subject, $user);
  74.                 break;
  75.             case 'ROLE_PURCHASE_INVOICE_DISABLE':
  76.                 return $this->canDisable($subject, $user);
  77.                 break;
  78.             case 'ROLE_PURCHASE_INVOICE_ARCHIVE':
  79.                 return $this->canArchive($subject, $user);
  80.                 break;
  81.             case 'ROLE_PURCHASE_INVOICE_NOT_ARCHIVE':
  82.                 return $this->canNotArchive($subject, $user);
  83.                 break;
  84.             case 'ROLE_PURCHASE_INVOICE_ATTACHMENT':
  85.                 return $this->canUpload($subject, $user);
  86.                 break;
  87.             case 'ROLE_PURCHASE_INVOICE_SETTLEMENT':
  88.                 return $this->canSettlement($subject, $user);
  89.                 break;
  90.         }
  92.         return false;
  93.     }
  96.     private function canCreate()
  97.     {
  99.         if (in_array('ROLE_PURCHASE_INVOICE_CREATE', $this->session->get('privileges'))) {
  100.             return true;
  101.         }
  102.         return false;
  103.     }
  105.     private function canView()
  106.     {
  108.         if (in_array('ROLE_PURCHASE_INVOICE_VIEW', $this->session->get('privileges'))) {
  109.             return true;
  110.         }
  111.         return false;
  112.     }
  114.     private function canEdit(PurchaseInvoice $purchaseInvoice, User $user)
  115.     {
  116.         if (in_array('ROLE_PURCHASE_INVOICE_EDIT', $this->session->get('privileges'))) {
  117.             return true;
  118.         }
  119.         return false;
  120.     }
  122.     private function canDelete(PurchaseInvoice $purchaseInvoice, User $user)
  123.     {
  125.         if (in_array('ROLE_PURCHASE_INVOICE_DELETE', $this->session->get('privileges'))) {
  126.             return true;
  127.         }
  128.         return false;
  129.     }
  131.     private function canUpload(PurchaseInvoice $purchaseInvoice, User $user)
  132.     {
  134.         if (in_array('ROLE_PURCHASE_INVOICE_ATTACHMENT', $this->session->get('privileges'))) {
  135.             return true;
  136.         }
  137.         return false;
  138.     }
  140.     private function canDisable(PurchaseInvoice $purchaseInvoice, User $user)
  141.     {
  143.         if (in_array('ROLE_PURCHASE_INVOICE_DISABLE', $this->session->get('privileges'))) {
  144.             return true;
  145.         }
  146.         return false;
  147.     }
  148.     
  149.     private function canArchive(PurchaseInvoice $purchaseInvoice, User $user)
  150.     {
  152.         if (in_array('ROLE_PURCHASE_INVOICE_ARCHIVE', $this->session->get('privileges'))) {
  153.             return true;
  154.         }
  155.         return false;
  156.     }
  158.     private function canNotArchive(PurchaseInvoice $purchaseInvoice, User $user)
  159.     {
  161.         if (in_array('ROLE_PURCHASE_INVOICE_NOT_ARCHIVE', $this->session->get('privileges'))) {
  162.             return true;
  163.         }
  164.         return false;
  165.     }
  167.     private function canEnable(PurchaseInvoice $purchaseInvoice, User $user)
  168.     {
  170.         if (in_array('ROLE_PURCHASE_INVOICE_ENABLE', $this->session->get('privileges'))) {
  171.             return true;
  172.         }
  173.         return false;
  174.     }
  176.     private function canSettlement(PurchaseInvoice $purchaseInvoice, User $user)
  177.     {
  179.         if (in_array('ROLE_PURCHASE_INVOICE_SETTLEMENT', $this->session->get('privileges'))) {
  180.             return true;
  181.         }
  182.         return false;
  183.     }
  184. }