src/Security/Voter/PaymentVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\Payment;
  6. use App\Entity\User;
  7. use App\Enum\PermissionEnum;
  8. use App\Service\UserPermissionLookup;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. use Symfony\Component\Security\Core\User\UserInterface;
  13. class PaymentVoter extends Voter
  14. {
  15.     /**
  16.      * @var UserPermissionLookup
  17.      */
  18.     private $userPermissionLookup;
  20.     public function __construct(UserPermissionLookup $userPermissionLookup)
  21.     {
  22.         $this->userPermissionLookup = $userPermissionLookup;
  23.     }
  25.     protected function supports($attribute, $subject)
  26.     {
  27.         $arrayPermissions = [
  28.             PermissionEnum::PAYMENT_VIEW,
  29.             PermissionEnum::PAYMENT_EDIT,
  30.             PermissionEnum::PAYMENT_CREATE,
  31.             PermissionEnum::PAYMENT_DELETE,
  32.             PermissionEnum::PAYMENT_CANCEL,
  33.             PermissionEnum::PAYMENT_EXPORT_EXCEL_DETAIL,
  34.             PermissionEnum::PAYMENT_EXPORT_EXCEL_BALANCE,
  35.         ];
  36.         if (!\in_array($attribute, $arrayPermissions, true)) {
  37.             return false;
  38.         }
  40.         if (!$subject instanceof Payment) {
  41.             return false;
  42.         }
  44.         return true;
  45.     }
  47.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  48.     {
  49.         /** @var User $user */
  50.         $user = $token->getUser();
  51.         if (!$user instanceof UserInterface) {
  52.             return false;
  53.         }
  54.         switch ($attribute) {
  55.             case PermissionEnum::PAYMENT_EDIT:
  56.                 return $this->canEdit($user);
  57.             case  PermissionEnum::PAYMENT_CREATE:
  58.                 return $this->canCreate($user);
  59.             case  PermissionEnum::PAYMENT_DELETE:
  60.                 return $this->canDelete($user);
  61.             case  PermissionEnum::PAYMENT_VIEW:
  62.                 return $this->canView($user);
  63.             case  PermissionEnum::PAYMENT_EXPORT_EXCEL_DETAIL:
  64.                 return $this->canExportExcelDetail($user);
  65.             case  PermissionEnum::PAYMENT_EXPORT_EXCEL_BALANCE:
  66.                 return $this->canExportExcelBalance($user);
  67.             case  PermissionEnum::PAYMENT_CANCEL:
  68.                 return $this->canCancel($user);
  69.         }
  71.         return false;
  72.     }
  74.     private function canView(User $user)
  75.     {
  76.         $permissions = $this->userPermissionLookup->findAllByUser($user);
  77.         if (\in_array(PermissionEnum::PAYMENT_VIEW, $permissions, true)) {
  78.             return true;
  79.         }
  81.         return false;
  82.     }
  84.     private function canEdit(User $user)
  85.     {
  86.         $permissions = $this->userPermissionLookup->findAllByUser($user);
  87.         if (\in_array(PermissionEnum::PAYMENT_EDIT, $permissions, true)) {
  88.             return true;
  89.         }
  91.         return false;
  92.     }
  94.     private function canCreate(User $user)
  95.     {
  96.         $permissions = $this->userPermissionLookup->findAllByUser($user);
  97.         if (\in_array(PermissionEnum::PAYMENT_CREATE, $permissions, true)) {
  98.             return true;
  99.         }
  101.         return false;
  102.     }
  104.     private function canDelete(User $user)
  105.     {
  106.         $permissions = $this->userPermissionLookup->findAllByUser($user);
  107.         if (\in_array(PermissionEnum::PAYMENT_DELETE, $permissions, true)) {
  108.             return true;
  109.         }
  111.         return false;
  112.     }
  114.     private function canCancel(User $user)
  115.     {
  116.         $permissions = $this->userPermissionLookup->findAllByUser($user);
  117.         if (\in_array(PermissionEnum::PAYMENT_CANCEL, $permissions, true)) {
  118.             return true;
  119.         }
  121.         return false;
  122.     }
  124.     private function canExportExcelBalance(User $user)
  125.     {
  126.         $permissions = $this->userPermissionLookup->findAllByUser($user);
  127.         if (\in_array(PermissionEnum::PAYMENT_EXPORT_EXCEL_BALANCE, $permissions, true)) {
  128.             return true;
  129.         }
  131.         return false;
  132.     }
  134.     private function canExportExcelDetail(User $user)
  135.     {
  136.         $permissions = $this->userPermissionLookup->findAllByUser($user);
  137.         if (\in_array(PermissionEnum::PAYMENT_EXPORT_EXCEL_DETAIL, $permissions, true)) {
  138.             return true;
  139.         }
  141.         return false;
  142.     }
  143. }