for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
namespace Oc\Security\Voter;
use Oc\Entity\UserEntity;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
use Symfony\Component\Security\Core\User\UserInterface;
class UserVoter extends Voter
{
/**
* @var AccessDecisionManagerInterface
*/
private $accessDecisionManager;
public function __construct(AccessDecisionManagerInterface $accessDecisionManager)
$this->accessDecisionManager = $accessDecisionManager;
}
protected function supports($attribute, $subject): bool
return in_array($attribute, ['CAN_VIEW'])
&& ($subject instanceof UserEntity || $subject === UserEntity::class);
protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
$user = $token->getUser();
// if the user is anonymous, do not grant access
if (!$user instanceof UserInterface) {
return false;
$grantingRoles = [
'ROLE_SUPER_ADMIN',
'ROLE_ADMIN',
'ROLE_SUPPORT_HEAD',
'ROLE_SOCIAL_HEAD',
'ROLE_DEVELOPER_HEAD',
];
foreach ($grantingRoles as $grantingRole) {
if ($this->accessDecisionManager->decide($token, [$grantingRole])) {
return true;
switch ($attribute) {
case 'CAN_VIEW':
// logic to determine if the user can EDIT
// return true or false
break;
OpencachingDeutschland /
oc-server3
