src/Bundles/UserBundle/Security/Voter/RolePermissionsVoter.php line 17

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Bundles\UserBundle\Security\Voter;
  7. use App\Bundles\OrganizationBundle\Exception\UserOrganizationNotFoundException;
  8. use App\Bundles\OrganizationBundle\Service\UserOrganization\UserOrganizationBinder;
  9. use App\Bundles\OrganizationBundle\Service\UserOrganization\UserOrganizationProvider;
  10. use App\Bundles\UserBundle\Entity\Permission;
  11. use App\Bundles\UserBundle\Enum\RolePermissionEnum;
  12. use App\Bundles\UserBundle\Repository\PermissionRepository;
  13. use App\Platform\Service\SessionProvider;
  14. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  15. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  17. class RolePermissionsVoter extends Voter
  18. {
  19.     public function __construct(
  20.         private readonly PermissionRepository $permissionRepository,
  21.         private readonly SessionProvider $sessionProvider,
  22.         private readonly UserOrganizationBinder $organizationBinder,
  23.         private readonly UserOrganizationProvider $provider,
  24.     ) {
  25.     }
  27.     protected function supports(string $attribute, $subject): bool
  28.     {
  29.         return (bool)RolePermissionEnum::tryFrom($attribute);
  30.     }
  32.     /**
  33.      * @throws UserOrganizationNotFoundException
  34.      */
  35.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  36.     {
  37.         if (!$token->getUser()) {
  38.             return false;
  39.         }
  41.         // TODO: get organization from session
  42.         $session = $this->sessionProvider->provide();
  44.         if (!$session->has($this->organizationBinder::SESSION_USER_ORGANIZATION_KEY)) {
  45.             return false;
  46.         }
  48.         $userOrganization = $this->provider->provide(
  49.             $session->get($this->organizationBinder::SESSION_USER_ORGANIZATION_KEY)
  50.         );
  52.         $userPermissions = $this->permissionRepository->findForUserInOrganization(
  53.             $userOrganization->getOrganization(),
  54.             $token->getUser()
  55.         );
  56.         $permissionNames = array_map(fn(Permission $permission) => $permission->getValue(), $userPermissions);
  58.         return in_array($attribute, $permissionNames);
  59.     }
  60. }