src/CoreBundle/Security/QuizVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace CoreBundle\Security;
  5. use AdminBundle\Service\EasyAdminService;
  6. use CoreBundle\Entity\Quiz;
  7. use Symfony\Component\HttpFoundation\RequestStack;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\Security;
  12. class QuizVoter extends Voter
  13. {
  14. const PERMISSION = 'quizEntityPermission';
  15. const INDEX_ACTION = 'quizIndexAction';
  16. const NEW_ACTION = 'quizNewAction';
  17. const EDIT_ACTION = 'quizEditAction';
  18. const DELETE_ACTION = 'quizDeleteAction';
  20. private Security $security;
  21. private EasyAdminService $easyAdminService;
  22. private RequestStack $requestStack;
  24. public function __construct(Security $security, EasyAdminService $easyAdminService, RequestStack $requestStack)
  25. {
  26. $this->security = $security;
  27. $this->easyAdminService = $easyAdminService;
  28. $this->requestStack = $requestStack;
  29. }
  31. protected function supports(string $attribute, $subject): bool
  32. {
  33. // For index and new, $subject will always be null. For permission, it will be null when trying to create a new entity.
  34. if (in_array($attribute, [self::INDEX_ACTION, self::NEW_ACTION, self::PERMISSION])) {
  35. return true;
  36. }
  38. if (in_array($attribute, [self::EDIT_ACTION, self::DELETE_ACTION])) {
  39. return $subject instanceof Quiz;
  40. }
  42. return false;
  43. }
  45. protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  46. {
  47. if ($attribute === self::INDEX_ACTION) {
  48. // Allow everyone to list - the entity permissions will still apply and hide entities you are not allowed
  49. // to access.
  50. return true;
  51. }
  53. if ($attribute === self::NEW_ACTION || $attribute === self::PERMISSION && $subject === null) {
  54. // Anyone with cms access should be able to create new quizzes
  55. return true;
  56. }
  58. if (!$subject instanceof Quiz) {
  59. throw new \LogicException("Invalid type for voter and attribute.");
  60. }
  62. return $this->checkEntityPermissions($subject);
  63. }
  65. public function checkEntityPermissions(Quiz $subject): bool
  66. {
  67. // ROLE_SUPER_ADMIN inherits ROLE_ADMIN, and will also be included here.
  68. if ($this->security->isGranted('ROLE_ADMIN')) {
  69. return true;
  70. }
  72. $publication = $subject->getPublication();
  74. if ($publication === null) {
  75. try {
  76. // When creating a new quiz in QuizFromPublicationCrudController
  77. $publication = $this->easyAdminService->getPublication($this->requestStack->getCurrentRequest());
  78. } catch (\Exception) {}
  79. }
  81. if ($publication !== null) {
  82. return $this->easyAdminService->userCanAccessPublication($publication);
  83. }
  85. return false;
  86. }
  87. }