Oc\Security\Voter\UserVoter::voteOnAttribute()

Complexity

Conditions	5
Paths	6

Size

Total Lines

31

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
    {
        $user = $token->getUser();
        // if the user is anonymous, do not grant access
        if (!$user instanceof UserInterface) {
            return false;
        }

        $grantingRoles = [
            'ROLE_SUPER_ADMIN',
            'ROLE_ADMIN',
            'ROLE_SUPPORT_HEAD',
            'ROLE_SOCIAL_HEAD',
            'ROLE_DEVELOPER_HEAD',
        ];

        foreach ($grantingRoles as $grantingRole) {
            if ($this->accessDecisionManager->decide($token, [$grantingRole])) {
                return true;
            }
        }

        switch ($attribute) {
            case 'CAN_VIEW':
                // logic to determine if the user can EDIT
                // return true or false
                break;
        }

        return false;
    }
}