MetalArend / authentication-bundle

                $this->dispatchSwitchUserEvent($request, $token);

                return $originalToken;

            }

        } elseif (false === $this->accessDecisionManager->decide($token, [$this->role])) {

            $this->log(sprintf('Token has no right to impersonate "%s", access denied: %s', $username, $originalToken));

            throw new AccessDeniedException(sprintf('Token has no right to impersonate "%s", access denied: %s', $username, $originalToken));

        }

        $this->log(sprintf('Attempting to impersonate "%s"', $username));

        if (false !== $originalToken) {

            $this->log(sprintf('Original token found: %s', $originalToken));

            // User is impersonating someone, they are trying to switch directly to another user, make sure original user has access.

            if (false === $this->accessDecisionManager->decide($originalToken, [$this->role])) {

                $this->log(sprintf('Original token has no right to impersonate "%s", access denied: %s', $username, $originalToken));

                throw new AccessDeniedException(sprintf('Original token has no right to impersonate "%s", access denied: %s', $username, $originalToken));

            }

            if ($originalToken->getUsername() === $username) {

                $this->log(sprintf('Original token is already for "%s", switching to original token: %s', $username, $originalToken));

                $this->dispatchSwitchUserEvent($request, $token);