src/Security/Voter/HomeworkResultVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\DBAL\Types\HomeworkResultStatusEnum;
  6. use App\Entity\HomeworkResult;
  7. use App\Entity\User;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\User\UserInterface;
  12. class HomeworkResultVoter extends Voter
  13. {
  14.     const CHECK = 'homework_check';
  15.     const CAN_HANDOVER = 'can_handover';
  17.     protected function supports($attribute, $subject)
  18.     {
  19.         return in_array($attribute, [self::CHECK, self::CAN_HANDOVER])
  20.             && $subject instanceof HomeworkResult;
  21.     }
  23.     /**
  24.      * @param string $attribute
  25.      * @param HomeworkResult $subject
  26.      * @param TokenInterface $token
  27.      *
  28.      * @return bool
  29.      */
  30.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  31.     {
  32.         $user = $token->getUser();
  33.         // if the user is anonymous, do not grant access
  34.         if (!$user instanceof UserInterface) {
  35.             return false;
  36.         }
  38.         // ... (check conditions and return true to grant permission) ...
  39.         switch ($attribute) {
  40.             case self::CHECK:
  41.                 /** @var User $student */
  42.                 $student = $subject->getStudent();
  43.                 if($student->getCurator()->getId() == $user->getId()) {
  44.                     return true;
  45.                 }
  46.                 return false;
  47.                 break;
  48.             case self::CAN_HANDOVER:
  49.                 if (
  50.                     !$subject->getId()
  51.                     || (
  52.                         $user == $subject->getStudent()
  53.                         && (
  54.                             $subject->getHomework()->getAutocheck()
  55.                             && $subject->hasAttempts()
  56.                             || (
  57.                                 !$subject->hasAttempts()
  58.                                 && HomeworkResultStatusEnum::STATUS_ON_REVIEW == $subject->getStatus()
  59.                             )
  60.                         )
  61.                         || (
  62.                             !$subject->getHomework()->getAutocheck()
  63.                             && HomeworkResultStatusEnum::STATUS_DONE != $subject->getStatus()
  64.                         )
  65.                     )
  66.                 ) {
  67.                     return true;
  68.                 }
  70.                 break;
  71.         }
  73.         return false;
  74.     }
  75. }