src/Security/Authorization/Voter/ViewBackendUserVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Security\Authorization\Voter;
  5. use App\Entity\PrivateUser;
  6. use App\Entity\User;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. class ViewBackendUserVoter extends Voter
  11. {
  12.     public const VIEW = 'view';
  14.     protected function supports($attribute, $user)
  15.     {
  16.         if (self::VIEW !== $attribute) {
  17.             return false;
  18.         }
  20.         if (!$user instanceof User) {
  21.             return false;
  22.         }
  24.         return true;
  25.     }
  27.     protected function voteOnAttribute($attribute, $user, TokenInterface $token)
  28.     {
  29.         $currentUser = $token->getUser();
  31.         if ($currentUser->isGranted('ROLE_STRANGER_SALESPERSON')) {
  32.             if ($user instanceof PrivateUser) {
  33.                 return false;
  34.             }
  36.             if ($user->getSalesman() !== $currentUser) {
  37.                 return false;
  38.             }
  39.         }
  41.         return true;
  42.     }
  43. }