Oc\Security\Voter\UserVoter

Complexity

Total Complexity

9

Size/Duplication

Total Lines	50
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	supports()	0	5	3
A	voteOnAttribute()	0	31	5

<?php

namespace Oc\Security\Voter;

use Oc\Entity\UserEntity;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
use Symfony\Component\Security\Core\User\UserInterface;

class UserVoter extends Voter
{
    /**
     * @var AccessDecisionManagerInterface
     */
    private $accessDecisionManager;

    public function __construct(AccessDecisionManagerInterface $accessDecisionManager)
    {
        $this->accessDecisionManager = $accessDecisionManager;
    }

    protected function supports($attribute, $subject): bool
    {
        return in_array($attribute, ['CAN_VIEW'])
            && ($subject instanceof UserEntity || $subject === UserEntity::class);
    }

    protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
    {
        $user = $token->getUser();
        // if the user is anonymous, do not grant access
        if (!$user instanceof UserInterface) {
            return false;
        }

        $grantingRoles = [
            'ROLE_SUPER_ADMIN',
            'ROLE_ADMIN',
            'ROLE_SUPPORT_HEAD',
            'ROLE_SOCIAL_HEAD',
            'ROLE_DEVELOPER_HEAD',
        ];

        foreach ($grantingRoles as $grantingRole) {
            if ($this->accessDecisionManager->decide($token, [$grantingRole])) {
                return true;
            }
        }

        switch ($attribute) {
            case 'CAN_VIEW':
                // logic to determine if the user can EDIT
                // return true or false
                break;
        }

        return false;
    }
}