src/Security/Voters/UserSystemAccessVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voters;
  5. use App\Service\SystemServices\ISystemAccessService;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  8. use Symfony\Component\Security\Core\Security;
  9. use Symfony\Component\Security\Core\User\UserInterface;
  11. class UserSystemAccessVoter extends Voter
  12. {
  13.     private $security;
  14.     private $systemService;
  15.     const SUPER_ADMIN_CONTROLLER_ACCESS = 'FLEET_MGT_CONTROLLER_ACCESS';
  17.     /**
  18.      * @param Security $security
  19.      * @param ISystemAccessService $systemService
  20.      */
  21.     public function __construct(Security $security, ISystemAccessService $systemService)
  22.     {
  23.         $this->security = $security;
  24.         $this->systemService = $systemService;
  25.     }
  27.     protected function supports(string $attribute, $subject): bool
  28.     {
  29.         if ($attribute != self::SUPER_ADMIN_CONTROLLER_ACCESS) {
  30.             return false;
  31.         }
  33.         return true;
  34.     }
  36.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  37.     {
  38.         $user = $token->getUser();
  40.         if (!$user instanceof UserInterface || empty($subject)) {
  41.             return false;
  42.         }
  44.         if (!$this->security->isGranted($user->getRole()->getMetaCode())) {
  45.             return false;
  46.         }
  48.         /**
  49.          * super system access level check
  50.          */
  52.         return $this->systemService->subSystemModuleAccessValidation($user, $subject);
  54.         //todo generate access log
  55.     }
  56. }