src/Bundles/DiseaseCaseBundle/Security/ViewDiseaseCaseVoter.php line 15

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Bundles\DiseaseCaseBundle\Security;
  7. use App\Bundles\DiseaseCaseBundle\Entity\DiseaseCase;
  8. use App\Bundles\DiseaseCaseBundle\Enum\SharePermissionEnum;
  9. use App\Bundles\DiseaseCaseBundle\Service\DiseaseCaseService;
  10. use App\Bundles\OrganizationBundle\Service\Organization\OrganizationService;
  11. use App\Bundles\UserBundle\Enum\SystemPermissionEnum;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  15. class ViewDiseaseCaseVoter extends Voter
  16. {
  17.     public function __construct(
  18.         private readonly OrganizationService $organizationService,
  19.         private readonly DiseaseCaseService $diseaseCaseService,
  20.     ) {
  21.     }
  23.     protected function supports(string $attribute, $subject): bool
  24.     {
  25.         return in_array($attribute, [SystemPermissionEnum::SPECIFIC_DISEASE_CASE_VIEW->value]);
  26.     }
  28.     /** @param DiseaseCase $subject */
  29.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  30.     {
  31.         if (
  32.             !($this->organizationService->hasPermissionByOrganization($subject->getCurrentOrganization()) ||
  33.                 $this->organizationService->hasPermissionByOrganization($subject->getInvestigatingInstitution()) ||
  34.                 $this->organizationService->hasPermissionByPatientAddress($subject->getPatientLivingAddress()) ||
  35.                 $this->diseaseCaseService->hasSharedPermissions(
  36.                     $subject,
  37.                     [SharePermissionEnum::SHOW, SharePermissionEnum::EDIT]
  38.                 )
  39.             )
  40.         ) {
  41.             return false;
  42.         }
  44.         return true;
  45.     }
  46. }