src/Security/Voter/FormationVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  6. use App\Entity\Formation;
  7. use App\Repository\FormationRegistrationRepository;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\Security;
  11. use Symfony\Component\Security\Core\User\UserInterface;
  13. class FormationVoter extends Voter
  14. {
  18.     public const FORMATION_SHOW = 'FORMATION_SHOW';
  21.     private $security;
  22.     private FormationRegistrationRepository $formationRepository;
  24.     public function __construct(Security $security, FormationRegistrationRepository $formationRepository)
  25.     {
  26.         $this->security = $security;
  27.         $this->formationRepository = $formationRepository;
  28.     }
  30.     protected function supports(string $attribute, $subject): bool
  31.     {
  32.         return in_array($attribute, [self::FORMATION_SHOW])
  33.             && ( $subject instanceof Formation);
  34.     }
  36.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  37.     {
  38.         //utilisateur connecté
  39.         $user = $token->getUser();
  40.         // if the user is anonymous, do not grant access
  41.         if (!$user instanceof UserInterface) {
  42.             return false;
  43.         }
  46.         switch ($attribute) {
  47.             case self::FORMATION_SHOW:
  48.                 return $this->canUserShowFormation($subject, $user);
  50.         }
  52.         return false;
  53.     }
  55.     /**
  56.      * @param Formation $formation
  57.      * @param UserInterface $user - user connecté
  58.      * @return bool
  59.      */
  60.     private function canUserShowFormation(Formation $formation, UserInterface $user): bool
  61.     {
  63.         //si admin ok
  64.         if($this->security->isGranted('ROLE_ADMIN') && $formation->getOwner() === $user){
  65.             return true;
  66.         }
  68.         //si rh
  69.         if ($this->security->isGranted('ROLE_RH')){
  71. //            $f = $this->formationRepository->belongsToUser($user,$formation->getId());
  73.             //soit je suis propriétaire
  74.             if($formation->getOwner() === $user){
  75.                 return true ;
  76.             }
  78.             $f = $this->formationRepository->userIsRegistered($user,$formation->getId());
  79.             //soit je suis inscrit et la formation est public
  80.             if( ($f && !empty($f)) &&  $formation->isPublished()){
  81.                 return true;
  82.             }
  83.         }
  86.         //si user
  87.         if ($this->security->isGranted('ROLE_USER_ACTIF') || $this->security->isGranted('ROLE_USER_INACTIF')) {
  88.             $f = $this->formationRepository->userIsRegistered($user,$formation->getId());
  90.             if( ($f && !empty($f)) &&  $formation->isPublished()){
  91.                 return true;
  92.             }
  93.         }
  96.         return false;
  97.     }
  98. }