src/Security/Voter/Purchase/PurchaseQuotationVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter\Purchase;
  5. use App\Entity\Purchase\PurchaseRequest;
  6. use App\Entity\Security\User;
  7. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\User\UserInterface;
  12. class PurchaseQuotationVoter extends Voter
  13. {
  15.     private $session;
  17.     public function __construct(SessionInterface $session)
  18.     {
  19.         $this->session = $session;
  20.     }
  22.     protected function supports($attribute, $subject)
  23.     {
  24.         // replace with your own logic
  25.         // https://symfony.com/doc/current/security/voters.html
  26.         if (!in_array($attribute, [
  28.             'ROLE_PURCHASE_QUOTATION_CREATE',
  29.             'ROLE_PURCHASE_QUOTATION_VIEW',
  30.             'ROLE_PURCHASE_QUOTATION_EDIT',
  31.             'ROLE_PURCHASE_QUOTATION_DELETE',
  32.             'ROLE_PURCHASE_QUOTATION_ENABLE',
  33.             'ROLE_PURCHASE_QUOTATION_DISABLE',
  34.             'ROLE_PURCHASE_QUOTATION_ARCHIVE',
  35.             'ROLE_PURCHASE_QUOTATION_NOT_ARCHIVE',
  36.             'ROLE_PURCHASE_QUOTATION_ATTACHMENT',
  38.             'ROLE_PURCHASE_QUOTATION_ORDER'
  39.             ])) {
  40.             return false;
  41.         }
  43.         // only vote on `Activity` objects
  44.         if (!$subject instanceof PurchaseRequest) {
  45.             return false;
  46.         }
  48.         return true;
  49.     }
  51.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  52.     {
  53.         $user = $token->getUser();
  54.         // if the user is anonymous, do not grant access
  55.         if (!$user instanceof UserInterface) {
  56.             return false;
  57.         }
  59.         // ... (check conditions and return true to grant permission) ...
  60.         switch ($attribute) {
  62.             case 'ROLE_PURCHASE_QUOTATION_CREATE':
  63.                 return $this->canCreate();
  64.                 break;
  65.             case 'ROLE_PURCHASE_QUOTATION_VIEW':
  66.                 return $this->canView();
  67.                 break;
  68.             case 'ROLE_PURCHASE_QUOTATION_EDIT':
  69.                 return $this->canEdit($subject, $user);
  70.                 break;
  71.             case 'ROLE_PURCHASE_QUOTATION_DELETE':
  72.                 return $this->canDelete($subject, $user);
  73.                 break;
  74.             case 'ROLE_PURCHASE_QUOTATION_ENABLE':
  75.                 return $this->canEnable($subject, $user);
  76.                 break;
  77.             case 'ROLE_PURCHASE_QUOTATION_DISABLE':
  78.                 return $this->canDisable($subject, $user);
  79.                 break;
  80.             case 'ROLE_PURCHASE_QUOTATION_ARCHIVE':
  81.                 return $this->canArchive($subject, $user);
  82.                 break;
  83.             case 'ROLE_PURCHASE_QUOTATION_NOT_ARCHIVE':
  84.                 return $this->canNotArchive($subject, $user);
  85.                 break;
  86.             case 'ROLE_PURCHASE_QUOTATION_ATTACHMENT':
  87.                 return $this->canAttachFile($subject, $user);
  88.                 break;
  89.             case 'ROLE_PURCHASE_QUOTATION_ORDER':
  90.                 return $this->canOrder($subject, $user);
  91.                 break;
  92.         }
  94.         return false;
  95.     }
  98.     private function canCreate()
  99.     {
  101.         if (in_array('ROLE_PURCHASE_QUOTATION_CREATE', $this->session->get('privileges'))) {
  102.             return true;
  103.         }
  104.         return false;
  105.     }
  107.     private function canView()
  108.     {
  110.         if (in_array('ROLE_PURCHASE_QUOTATION_VIEW', $this->session->get('privileges'))) {
  111.             return true;
  112.         }
  113.         return false;
  114.     }
  116.     private function canEdit(PurchaseRequest $purchaseQuotation, User $user)
  117.     {
  118.         if (in_array('ROLE_PURCHASE_QUOTATION_EDIT', $this->session->get('privileges'))) {
  119.             return true;
  120.         }
  121.         return false;
  122.     }
  124.     private function canDelete(PurchaseRequest $purchaseQuotation, User $user)
  125.     {
  127.         if (in_array('ROLE_PURCHASE_QUOTATION_DELETE', $this->session->get('privileges'))) {
  128.             return true;
  129.         }
  130.         return false;
  131.     }
  133.     private function canDisable(PurchaseRequest $purchaseQuotation, User $user)
  134.     {
  136.         if (in_array('ROLE_PURCHASE_QUOTATION_DISABLE', $this->session->get('privileges'))) {
  137.             return true;
  138.         }
  139.         return false;
  140.     }
  142.     private function canArchive(PurchaseRequest $purchaseQuotation, User $user)
  143.     {
  145.         if (in_array('ROLE_PURCHASE_QUOTATION_ARCHIVE', $this->session->get('privileges'))) {
  146.             return true;
  147.         }
  148.         return false;
  149.     }
  151.     private function canNotArchive(PurchaseRequest $purchaseQuotation, User $user)
  152.     {
  154.         if (in_array('ROLE_PURCHASE_QUOTATION_NOT_ARCHIVE', $this->session->get('privileges'))) {
  155.             return true;
  156.         }
  157.         return false;
  158.     }
  160.     private function canOrder(PurchaseRequest $purchaseQuotation, User $user)
  161.     {
  163.         if (in_array('ROLE_PURCHASE_QUOTATION_ORDER', $this->session->get('privileges'))) {
  164.             return true;
  165.         }
  166.         return false;
  167.     }
  169.     private function canEnable(PurchaseRequest $purchaseQuotation, User $user)
  170.     {
  172.         if (in_array('ROLE_PURCHASE_QUOTATION_ENABLE', $this->session->get('privileges'))) {
  173.             return true;
  174.         }
  175.         return false;
  176.     }
  178.     private function canAttachFile(PurchaseRequest $purchaseQuotation, User $user)
  179.     {
  181.         if (in_array('ROLE_PURCHASE_QUOTATION_ORDER', $this->session->get('privileges'))) {
  182.             return true;
  183.         }
  184.         return false;
  185.     }
  186. }