src/Security/Voter/EnterpriseVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  6. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  7. use Symfony\Component\Security\Core\User\UserInterface;
  8. use App\Entity\User;
  10. class EnterpriseVoter extends Voter
  11. {
  12.     protected function supports($attribute, $subject)
  13.     {
  14.         return in_array($attribute, ['create', 'edit','view'])
  15.             && $subject instanceof \App\Entity\Enterprise;
  16.     }
  18.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  19.     {
  20.         $user = $token->getUser();
  21.         // if the user is anonymous, do not grant access
  22.         if (!$user instanceof UserInterface) {
  23.             return false;
  24.         }
  25.         $enterprise = $user->getEnterprise();
  26.         if ($user->getRoles()[0] == User::ROLE_ADMIN) { return true;
  27.         }
  28.         if ($user->getRoles()[0] == User::ROLE_CUSTOMER){
  29.             return ($enterprise == $subject);
  30.         }
  31.         if ($user->getRoles()[0] == User::ROLE_BUSINESSLINEMANAGER){
  32.             foreach($subject->getComboCustomers() as $combo){
  33.                 if (in_array($combo->getProduct()->getFiliere()->getId(),$user->getAllowedFiliere()))
  34.                     return true;
  35.             }
  36.             foreach($subject->getComboProviders() as $combo){
  37.                 if (in_array($combo->getProduct()->getFiliere()->getId(),$user->getAllowedFiliere()))
  38.                     return true;
  39.             }            
  40.             return false;
  41.         }
  42.         if ($user->getRoles()[0] == User::ROLE_GROUPMANAGER){
  43.             return in_array($subject->getGroupEnterprise()->getId(),$user->getAllowedFiliere());
  44.         }
  45.         if ($user->getRoles()[0] == User::ROLE_REGIONMANAGER){
  46.             return in_array(substr($subject->getLocations()[0]->getZipCode(),0,2),$user->getAllowedFiliere());
  47.             return in_array(substr($subject->getLocations()[1]->getZipCode(),0,2),$user->getAllowedFiliere());
  48.             return false;
  49.         }        
  55.         return false;
  56.     }
  57. }