src/Security/Voter/HelpQuestionVoter.php line 17

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Security\Voter;
  7. use App\DBAL\Types\RoleEnumType;
  8. use App\Entity\Lesson;
  9. use App\Entity\User;
  10. use App\Service\DutyService;
  11. use App\Service\HelpQuestionService;
  12. use DateTimeImmutable;
  13. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  14. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  15. use Symfony\Component\Security\Core\User\UserInterface;
  17. class HelpQuestionVoter extends Voter
  18. {
  19.     public const WRITE_QUESTION = 'WRITE_HELP_QUESTION';
  20.     public const READ_LIST = 'READ_HELP_LIST';
  21.     private const ACCESSED_ROLES = [
  22.         RoleEnumType::ROLE_CURATOR,
  23.         RoleEnumType::ROLE_MODERATOR,
  24.         RoleEnumType::ROLE_SUPER_ADMIN,
  25.         RoleEnumType::ROLE_ADMIN,
  26.     ];
  28.     private HelpQuestionService $helpQuestionService;
  29.     private DutyService $dutyService;
  31.     public function __construct(HelpQuestionService $helpQuestionService, DutyService $dutyService)
  32.     {
  33.         $this->helpQuestionService = $helpQuestionService;
  34.         $this->dutyService = $dutyService;
  35.     }
  37.     protected function supports($attribute, $subject): bool
  38.     {
  39.         return in_array($attribute, [self::WRITE_QUESTION, self::READ_LIST])
  40.             && $subject instanceof Lesson;
  41.     }
  43.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  44.     {
  45.         /** @var User $user */
  46.         $user = $token->getUser();
  48.         if (!$user instanceof UserInterface) {
  49.             return false;
  50.         }
  54.         foreach (self::ACCESSED_ROLES as $role) {
  55.             if ($user->hasRole($role)) {
  56.                 return true;
  57.             }
  58.         }
  60.         $helpQuestionDisabledUntilDate = DateTimeImmutable::createFromFormat('Y-m-d', $_ENV['OPTION_HELP_QUESTION_DISABLED_UNTIL_DATE']);
  62.         switch ($attribute) {
  63.             case self::READ_LIST:
  64.                 return $this->helpQuestionService->userHasAccessToHelpQuestion($user, $subject);
  65.             case self::WRITE_QUESTION:
  66.                 return $this->helpQuestionService->userHasAccessToHelpQuestion($user, $subject)
  67.                     && $user->hasCuratorSupportsInRocket()
  68.                     && $this->dutyService->issetDutyCurators()
  69.                     && $helpQuestionDisabledUntilDate < $now = new DateTimeImmutable();
  70.         }
  72.         return false;
  73.     }
  74. }