bundles/BackofficeBundle/Security/Authorization/Voter/ContractVoter.php line 38

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. /**
  6. * ContractVoter.php File.
  7. * This file is part of the Payment.net Project.
  8. *
  9. * PHP version 5
  10. *
  11. * @category Contract
  12. * @package Bdm\BackofficeBundle\Security\Authorization\Voter
  13. * @author Pavel Baraulya <pbaraulya@bdmultimedia.fr>
  14. * @link http://www.payment.net/
  15. *
  16. * FEATURES :
  17. * ==========
  18. * Class specifies rules to access Contract entities
  19. *
  20. * TODO-LIST :
  21. * ===========
  22. * Is granted should be changed when multiple contracts will come foe merchant
  23. *
  24. * HISTORY :
  25. * =========
  26. * 20150821 - Helen Tochko: class creation
  27. **/
  28. namespace Bdm\BackofficeBundle\Security\Authorization\Voter;
  30. use Bdm\AdminBundle\Entity\User;
  31. use Bdm\BackofficeBundle\Entity\Contract;
  32. use Bdm\BackofficeBundle\Entity\Merchant;
  33. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  35. /**
  36. * Voter for contract entity
  37. */
  38. class ContractVoter extends AbstractVoter
  39. {
  40. /**
  41. * @param string $sAttribute attribute
  42. * @param mixed $oSubject subject
  43. * @return bool
  44. */
  45. #[\Override]
  46. public function supports($sAttribute, $oSubject)
  47. {
  48. return $oSubject instanceof Contract && parent::supports($sAttribute, $oSubject);
  49. }
  51. /**
  52. * @param string $sAttr attr
  53. * @param mixed $mEntity entity
  54. * @param TokenInterface $oToken token
  55. *
  56. * @return bool
  57. */
  58. protected function voteOnAttribute($sAttr, $mEntity, TokenInterface $oToken)
  59. {
  60. $oUser = $oToken->getUser();
  61. if (true === $oUser instanceof User
  62. && true === $oUser->hasRole(User::ROLE_SUPER_ADMIN)
  63. && true === in_array($sAttr, ['VIEW', 'EDIT'])
  64. ) {
  65. return true;
  66. }
  68. if (true === $oUser instanceof Merchant
  69. && $sAttr === 'VIEW'
  70. && $oUser->getContracts()->contains($mEntity)) {
  71. return true;
  72. }
  74. return false;
  75. }
  76. }