Zicht\Bundle\PageBundle\Security\Voter\AbstractAdminAwareVoter

Complexity

Total Complexity

5

Size/Duplication

Total Lines	33
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	3

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
B	vote()	0	18	5

<?php
/**
 * @author Rik van der Kemp <rik@zicht.nl>
 * @copyright Zicht Online <http://www.zicht.nl>
 */

namespace Zicht\Bundle\PageBundle\Security\Voter;

use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;

/**
 * Checks on 'vote' whether or not the current user is and admin
 *
 * @package Zicht\Bundle\PageBundle\Security\Voter
 */
abstract class AbstractAdminAwareVoter extends AbstractVoter
{
    /**
     * Returns the vote for the given parameters.
     *
     * This method must return one of the following constants:
     * ACCESS_GRANTED, ACCESS_DENIED, or ACCESS_ABSTAIN.
     *
     * @param TokenInterface $token A TokenInterface instance
     * @param object $object The object to secure
     * @param array $attributes An array of attributes associated with the method being invoked
     *
     * @return integer either ACCESS_GRANTED, ACCESS_ABSTAIN, or ACCESS_DENIED
     */
    public function vote(TokenInterface $token, $object, array $attributes)
    {
        /**
         * Admin users should see content no matter the scheduled dates
         * Since you can set the decision strategy to unanimous, you want to grant this explicitly
         */
        if ($this->supportsClass(get_class($object)) && sizeof($token->getRoles())) {

The method Symfony\Component\Security\Core\Authorization\Voter\VoterInterface::supportsClass() has been deprecated with message: since version 2.8, to be removed in 3.0.

            /** @var \Symfony\Component\Security\Core\Role\Role $role */
            foreach ($token->getRoles() as $role) {
                if (in_array($role->getRole(), array('ROLE_ADMIN', 'ROLE_SUPER_ADMIN'))) {
                    return VoterInterface::ACCESS_GRANTED;
                    break;

break is not strictly necessary here and could be removed.

                }
            }
        }

        return VoterInterface::ACCESS_ABSTAIN;
    }
}