src/Security/Voter/FileVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\CompanyDemand;
  6. use App\Entity\DemandFile;
  7. use App\Entity\File;
  8. use App\Entity\User;
  9. use LogicException;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. class FileVoter extends Voter
  14. {
  15. protected function supports(string $attribute, $subject): bool
  16. {
  17. // replace with your own logic
  18. // https://symfony.com/doc/current/security/voters.html
  19. return in_array($attribute, ['FILE_DOWNLOAD', 'FILE_REMOVE'], true)
  20. && $subject instanceof File;
  21. }
  23. protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  24. {
  25. $user = $token->getUser();
  26. // if the user is anonymous, do not grant access
  27. if (!$user instanceof User) {
  28. return false;
  29. }
  31. /** @var File $file */
  32. $file = $subject;
  34. switch ($attribute) {
  35. case 'FILE_REMOVE':
  36. return $file->getUser() === $user;
  37. case 'FILE_DOWNLOAD':
  38. if ($file->getUser() === $user) {
  39. return true;
  40. }
  42. if (in_array('ROLE_ADMIN', $user->getRoles(), true)) {
  43. return true;
  44. }
  46. // at this stage, we already know that the current user is a company who is trying to download a demand file
  48. if ($file->getDemandFile()) {
  49. $demand = $file->getDemandFile()->getDemand();
  51. if ($file->getDemandFile()->getType() === DemandFile::USER_PROOF_TYPE) {
  52. return false;
  53. }
  55. return $demand->getCompanyDemands()->exists(function (int $key, CompanyDemand $companyDemand) use ($user): bool {
  56. return $companyDemand->getCompany() === $user->getCompanies()->first();
  57. });
  58. }
  60. if ($file->getDemandTree()) {
  61. $demand = $file->getDemandTree()->getDemand();
  63. return $demand->getCompanyDemands()->exists(function (int $key, CompanyDemand $companyDemand) use ($user): bool {
  64. return $companyDemand->getCompany() === $user->getCompanies()->first();
  65. });
  66. }
  68. throw new LogicException('Unexpected case.');
  69. }
  71. return false;
  72. }
  73. }