<?php
namespace App\Security\Voter;
use App\Entity\AccountingFirm;
use App\Entity\PipelineMailjet;
use App\Entity\User;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
class EmailingClientVoter extends Voter
{
const ACCESS_EMAILING = 'access_emailing';
private EntityManagerInterface $em;
public function __construct(EntityManagerInterface $em)
{
$this->em = $em;
}
protected function supports(string $attribute, mixed $subject): bool
{
return in_array($attribute, [self::ACCESS_EMAILING]);
}
protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
{
$user = $token->getUser();
if (!$user instanceof User) {
return false;
}
// Si l'utilisateur est admin, on autorise sans vérification
if (in_array('ROLE_ADMIN', $user->getRoles())) {
return true;
}
/** @var AccountingFirm $accountingFirm */
$accountingFirm = $user->getAccountingFirm();
if (!$accountingFirm) {
return false;
}
return $this->canAccessEmailing($accountingFirm);
}
private function canAccessEmailing(AccountingFirm $accountingFirm): bool
{
$domainActivate = $accountingFirm->getDomainActivate();
$emailingActivate = $accountingFirm->isEmailingClientActivate();
if (!$domainActivate || !$emailingActivate) {
return false;
}
return true;
}
}