-
Notifications
You must be signed in to change notification settings - Fork 0
/
TaskVoter.php
43 lines (36 loc) · 1.09 KB
/
TaskVoter.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
<?php
namespace App\Security\Voter;
use App\Entity\Task;
use Symfony\Component\Security\Core\User\UserInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
class TaskVoter extends Voter
{
protected function supports($attribute, $subject)
{
return in_array($attribute, ['ENTITY_EDIT', 'ENTITY_DELETE'])
&& $subject instanceof Task;
}
protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token)
{
/**
* @var Task $subject
*/
$user = $token->getUser();
// if the user is anonymous, do not grant access
if (!$user instanceof UserInterface) {
return false;
}
// If Admin
if (in_array('ROLE_ADMIN', $user->getRoles())) {
return true;
}
// If Author
switch ($attribute) {
case 'ENTITY_EDIT':
case 'ENTITY_DELETE':
return $subject->getAuthor() === $user;
}
return false;
}
}