src/Security/Voter/SubstrateVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\CommentTree;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  8. use App\Entity\HomeworkResultComment;
  9. use App\Service\RoleCheckerService;
  12. class SubstrateVoter extends Voter
  13. {
  14.     public const SUBSTRATE_SHOW = 'SUBSTRATE_SHOW';
  15.     public const SUBSTRATE_SHOW_TREE = 'SUBSTRATE_SHOW_TREE';
  17.     private $security;
  18.     
  19.     public function __construct(RoleCheckerService $security)
  20.     {
  21.         $this->security = $security;
  22.     }
  23.     
  24.     protected function supports($attribute, $subject)
  25.     {
  26.         return in_array($attribute, [self::SUBSTRATE_SHOW, self::SUBSTRATE_SHOW_TREE]);
  27.     }
  29.     /**
  30.      * @var HomeworkResultComment|CommentTree $subject
  31.      */
  32.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  33.     {
  34.         
  35.         switch ($attribute) {
  36.             case 'SUBSTRATE_SHOW':
  37.                 if($this->security->isGranted($subject->getAuthor(), 'ROLE_ADMIN') && $subject->getForEvaluation()){
  38.                     return true;
  39.                 }
  40.                 break;
  41.             case 'SUBSTRATE_SHOW_TREE':
  42.                 if($subject->getLevel() > 0) {
  43.                     return false;
  44.                 }
  45.                 if($this->security->isGranted($subject->getAuthor(), 'ROLE_ADMIN')) {
  46.                     return true;
  47.                 }
  48.                 $curator = $subject->getHomeworkResult()->getCurator();
  49.                 if(!$curator) {
  50.                     $curator = $subject->getHomeworkResult()->getStudent()->getCurator();
  51.                 }
  52.                 if(!$curator) return false;
  53.                 if($curator->getId() === $subject->getAuthor()->getId()){
  54.                     return true;
  55.                 }
  57.                 break;
  58.         }
  60.         return false;
  61.     }
  62. }