src/Security/Voter/AccountFirmCollaborateurVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\User;
  6. use Symfony\Component\Security\Core\User\UserInterface;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. class AccountFirmCollaborateurVoter extends Voter
  11. {
  13.     private const ALLOWED_ATTRIBUTES = [
  14.             // Ma plateforme de com'
  15.             'ACCESS_EMAILING',
  16.             'ACCESS_SMS',
  17.             'ACCESS_SURVEY',
  18.             'ACCESS_EVENT',
  19.             'ACCESS_SPONSORSHIP',
  20.             'ACCESS_RECOMMENDATION',
  21.             'ACCESS_SATISFACTION',
  22.             'ACCESS_BIRTHDAY_CLIENT',
  23.             'ACCESS_QRCODE',
  24.             'ACCESS_SHORT_URL',
  25.             'ACCESS_VIDEO_TUTORIAL',
  27.             // Identité Visuelle
  28.             'ACCESS_LOGOS',
  29.             'ACCESS_LETTERHEADS',
  30.             'ACCESS_MAIL_SIGNATURE',
  31.             'ACCESS_TAMPON',
  32.             'ACCESS_SOCIAUX_MEDIA',
  33.             'ACCESS_PRINT',
  35.             // Mon Site Internet
  36.             'ACCESS_STATISTICS',
  37.             'ACCESS_NEWSLETTERS',
  38.             'ACCESS_OPPORTUNITIES',
  39.             'ACCESS_CONTACT',
  40.             'ACCESS_CONTACT_PROFESSION',
  41.             'ACCESS_CONTACT_CALLBACK',
  42.             'ACCESS_CONTACT_CUSTOM',
  43.             'ACCESS_SCROLLING_NEWS',
  44.             'ACCESS_USEFUL_LINKS',
  45.             'ACCESS_BLOG',
  46.             'ACCESS_PARTNERS',
  47.             'ACCESS_EBOOK',
  48.             'ACCESS_INVOICE',
  49.     ];
  51.     protected function supports(string $attribute, $subject): bool
  52.     {
  53.         return in_array($attribute, self::ALLOWED_ATTRIBUTES, true);
  54.     }
  56.     protected function voteOnAttribute(string $attribute, mixed $moduleName, TokenInterface $token): bool
  57.     {
  58.         $user = $token->getUser();
  60.         if (!$user instanceof User) {
  61.             return false;
  62.         }
  64.         $userRoles = $user->getRoles();
  65.         if (in_array('ROLE_ADMIN', $userRoles, true) || in_array('ROLE_ADMIN_FIRM', $userRoles, true) || in_array('ROLE_FIRM_PARTNER', $userRoles, true)) {
  66.             return true;
  67.         }
  68.         return in_array($attribute, $userRoles, true);
  69.     }
  70. }