src/Security/Voter/CompanyFileVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\CompanyDemand;
  6. use App\Entity\CompanyFile;
  7. use App\Entity\User;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. class CompanyFileVoter extends Voter
  12. {
  13. protected function supports(string $attribute, $subject): bool
  14. {
  15. // replace with your own logic
  16. // https://symfony.com/doc/current/security/voters.html
  17. return in_array($attribute, ['COMPANY_FILE_REMOVE'], true)
  18. && $subject instanceof CompanyFile;
  19. }
  21. protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  22. {
  23. $user = $token->getUser();
  25. // if the user is anonymous, do not grant access
  26. if (!$user instanceof User) {
  27. return false;
  28. }
  30. /** @var CompanyDemand $companyFile */
  31. $companyFile = $subject;
  32. $company = $companyFile
  33. ->getCompany()
  34. ;
  36. // ... (check conditions and return true to grant permission) ...
  37. switch ($attribute) {
  38. case 'COMPANY_FILE_REMOVE':
  39. // return true or false
  40. return
  41. $company->getUser() === $user ||
  42. in_array('ROLE_ADMIN', $user->getRoles(), true);
  43. }
  45. return false;
  46. }
  47. }