src/Security/Core/QuizVoter.php line 14

Open in your IDE?
  1. <?php
  3. namespace App\Security\Core;
  5. use App\Services\Admin\EasyAdminService;
  6. use App\Entity\Core\Quiz\Quiz;
  7. use Exception;
  8. use LogicException;
  9. use Symfony\Component\HttpFoundation\RequestStack;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. use Symfony\Component\Security\Core\Security;
  14. class QuizVoter extends Voter
  15. {
  16. const PERMISSION = 'quizEntityPermission';
  17. const INDEX_ACTION = 'quizIndexAction';
  18. const NEW_ACTION = 'quizNewAction';
  19. const EDIT_ACTION = 'quizEditAction';
  20. const DELETE_ACTION = 'quizDeleteAction';
  22. private Security $security;
  23. private EasyAdminService $easyAdminService;
  24. private RequestStack $requestStack;
  26. public function __construct(Security $security, EasyAdminService $easyAdminService, RequestStack $requestStack)
  27. {
  28. $this->security = $security;
  29. $this->easyAdminService = $easyAdminService;
  30. $this->requestStack = $requestStack;
  31. }
  33. protected function supports(string $attribute, $subject): bool
  34. {
  35. // For index and new, $subject will always be null. For permission, it will be null when trying to create a new entity.
  36. if (in_array($attribute, [self::INDEX_ACTION, self::NEW_ACTION, self::PERMISSION])) {
  37. return true;
  38. }
  40. if (in_array($attribute, [self::EDIT_ACTION, self::DELETE_ACTION])) {
  41. return $subject instanceof Quiz;
  42. }
  44. return false;
  45. }
  47. protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  48. {
  49. if ($attribute === self::INDEX_ACTION) {
  50. // Allow everyone to list - the entity permissions will still apply and hide entities you are not allowed
  51. // to access.
  52. return true;
  53. }
  55. if ($attribute === self::NEW_ACTION || $attribute === self::PERMISSION && $subject === null) {
  56. // Anyone with cms access should be able to create new quizzes
  57. return true;
  58. }
  60. if (!$subject instanceof Quiz) {
  61. throw new LogicException("Invalid type for voter and attribute.");
  62. }
  64. return $this->checkEntityPermissions($subject);
  65. }
  67. public function checkEntityPermissions(Quiz $subject): bool
  68. {
  69. // ROLE_SUPER_ADMIN inherits ROLE_ADMIN, and will also be included here.
  70. if ($this->security->isGranted('ROLE_ADMIN')) {
  71. return true;
  72. }
  74. $publication = $subject->getPublication();
  76. if ($publication === null) {
  77. try {
  78. // When creating a new quiz in QuizFromPublicationCrudController
  79. $publication = $this->easyAdminService->getPublication($this->requestStack->getCurrentRequest());
  80. } catch (Exception) {}
  81. }
  83. if ($publication !== null) {
  84. return $this->easyAdminService->userCanAccessPublication($publication);
  85. }
  87. return false;
  88. }
  89. }