LAG\AdminBundle\Security\Helper\SecurityHelper

Complexity

Total Complexity

7

Size/Duplication

Total Lines	36
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	2
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	getUser()	0	9	2
A	isOperationAllowed()	0	17	4

<?php

declare(strict_types=1);

namespace LAG\AdminBundle\Security\Helper;

use LAG\AdminBundle\Resource\Registry\ResourceRegistryInterface;
use Symfony\Component\Security\Core\Exception\AccessDeniedException;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Security\Core\User\UserInterface;

class SecurityHelper
{
    public function __construct(
        private Security $security,
        private ResourceRegistryInterface $registry
    ) {
    }

    public function isOperationAllowed(string $resourceName, string $operationName): bool
    {
        $user = $this->getUser();
        $resource = $this->registry->get($resourceName);

        if (!$resource->hasOperation($operationName)) {
            return false;
        }
        $operation = $resource->getOperation($operationName);

        foreach ($operation->getPermissions() ?? [] as $permission) {
            if (!$this->security->isGranted($permission, $user)) {
                return false;
            }
        }

        return true;
    }

    public function getUser(): UserInterface
    {
        $user = $this->security->getUser();

        if ($user === null) {
            throw new AccessDeniedException();
        }

        return $user;
    }
}