Ae\FeatureBundle\Security\FeatureSecurity

Complexity

Total Complexity

10

Size/Duplication

Total Lines	49
Duplicated Lines	0 %

Test Coverage

Coverage

82.35%

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
B	isGranted()	0	29	9

<?php

namespace Ae\FeatureBundle\Security;

use Ae\FeatureBundle\Entity\Feature;
use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;

/**
 * Controls access to a Feature.
 *
 * @author Carlo Forghieri <carlo@adespresso.com>
 */
class FeatureSecurity
{
    /**
     * @param AuthorizationCheckerInterface|null
     */
    protected $context;

    /**
     * @param AuthorizationCheckerInterface $context
     */
    public function __construct(AuthorizationCheckerInterface $context = null)
    {
        $this->context = $context;
    }

    /**
     * @param Feature $feature
     *
     * @return bool
     */
    public function isGranted(Feature $feature)
    {
        // feature is enabled without required roles
        // there's no need to check on user roles
        if (empty($feature->getRole()) && empty($feature->getParentRole())) {
            return $feature->isEnabled();
        }

        if (null === $this->context) {
            return false;
        }

        if (!$feature->isEnabled()) {
            return false;
        }

        if ($feature->getRole()) {
            if (!$this->context->isGranted($feature->getRole())) {
                return false;
            }
        }

        if ('' !== trim($feature->getParentRole())) {
            if (!$this->context->isGranted($feature->getParentRole())) {
                return false;
            }
        }

        return true;
    }
}