src/Security/Voter/CompanyVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\Company;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  8. use Symfony\Component\Security\Core\User\UserInterface;
  10. class CompanyVoter extends Voter
  11. {
  12. protected function supports(string $attribute, $subject): bool
  13. {
  14. // replace with your own logic
  15. // https://symfony.com/doc/current/security/voters.html
  16. return in_array($attribute, ['COMPANY_UPLOAD', 'COMPANY_UPDATE'], true) && $subject instanceof Company;
  17. }
  19. protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  20. {
  21. $user = $token->getUser();
  22. // if the user is anonymous, do not grant access
  23. if (!$user instanceof UserInterface) {
  24. return false;
  25. }
  27. /** @var Company $company */
  28. $company = $subject;
  30. // ... (check conditions and return true to grant permission) ...
  31. switch ($attribute) {
  32. case 'COMPANY_UPLOAD':
  33. // logic to determine if the user can EDIT
  34. // return true or false
  35. return ($company->getUser() === $user)
  36. || in_array('ROLE_ADMIN', $user->getRoles(), true);
  38. case 'COMPANY_UPDATE':
  39. // logic to determine if the user can VIEW
  40. // return true or false
  41. return $company->getUser() === $user;
  42. }
  44. return false;
  45. }
  46. }