JDecool\Bundle\SecurityRoleCheckerBundle\Security\RoleChecker

Complexity

Total Complexity

5

Size/Duplication

Total Lines	42
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	hasRole()	0	18	4

<?php

namespace JDecool\Bundle\SecurityRoleCheckerBundle\Security;

use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
use Symfony\Component\Security\Core\Role\Role;
use Symfony\Component\Security\Core\Role\RoleHierarchyInterface;
use Symfony\Component\Security\Core\Role\RoleInterface;
use Symfony\Component\Security\Core\User\UserInterface;

class RoleChecker implements RoleCheckerInterface
{
    /** @var AuthorizationCheckerInterface */
    private $authorizationChecker;

    /** @var RoleHierarchyInterface */
    private $roleHierarchy;

    /**
     * Constructor
     *
     * @param AuthorizationCheckerInterface $authorizationChecker
     * @param RoleHierarchyInterface        $roleHierarchy
     */
    public function __construct(AuthorizationCheckerInterface $authorizationChecker, RoleHierarchyInterface $roleHierarchy)
    {
        $this->authorizationChecker = $authorizationChecker;
        $this->roleHierarchy        = $roleHierarchy;
    }

    /**
     * {@inheritdoc}
     */
    public function hasRole($role, UserInterface $user = null)
    {
        if (null === $user) {
            return $this->authorizationChecker->isGranted($role);
        }

        $roles = $this->roleHierarchy->getReachableRoles(array_map(function ($role) {
            if (is_string($role)) {
                return new Role($role);
            } elseif (!$role instanceof RoleInterface) {
                throw new \InvalidArgumentException(sprintf('$roles must be an array of strings, or RoleInterface instances, but got %s.', gettype($role)));
            }

            return $role;
        }, $user->getRoles()));

        return in_array(new Role($role), $roles);
    }
}