LAG\AdminBundle\EventListener\Security\RequestListener

Complexity

Total Complexity

7

Size/Duplication

Total Lines	20
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	1

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__invoke()	0	13	6
A	__construct()	0	3	1

<?php

declare(strict_types=1);

namespace LAG\AdminBundle\EventListener\Security;

use LAG\AdminBundle\Metadata\AdminResource;
use Symfony\Component\HttpKernel\Event\ControllerArgumentsEvent;
use Symfony\Component\Security\Core\Exception\AccessDeniedException;
use Symfony\Component\Security\Core\Security;

class RequestListener
{
    public function __construct(
        private Security $security,
    ) {
    }

    public function __invoke(ControllerArgumentsEvent $event): void
    {
        $user = $this->security->getUser();

        foreach ($event->getArguments() as $argument) {
            if (!$argument instanceof AdminResource) {
                continue;
            }
            $permissions = $argument->getCurrentOperation()->getPermissions();

            foreach ($permissions as $permission) {
                if ($user === null || !$this->security->isGranted($permission, $user)) {
                    throw new AccessDeniedException();
                }
            }
        }
    }
}