src/Bundles/UserBundle/Security/Voter/RolePermissionsVoter.php line 18

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Bundles\UserBundle\Security\Voter;
  7. use App\Bundles\OrganizationBundle\Exception\UserOrganizationNotFoundException;
  8. use App\Bundles\OrganizationBundle\Service\UserOrganization\UserOrganizationBinder;
  9. use App\Bundles\OrganizationBundle\Service\UserOrganization\UserOrganizationProvider;
  10. use App\Bundles\UserBundle\Entity\Permission;
  11. use App\Bundles\UserBundle\Enum\RolePermissionEnum;
  12. use App\Bundles\UserBundle\Repository\PermissionRepository;
  13. use App\Platform\Service\SessionProvider;
  14. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  15. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  16. use Throwable;
  18. class RolePermissionsVoter extends Voter
  19. {
  20.     public function __construct(
  21.         private readonly PermissionRepository $permissionRepository,
  22.         private readonly SessionProvider $sessionProvider,
  23.         private readonly UserOrganizationBinder $organizationBinder,
  24.         private readonly UserOrganizationProvider $provider,
  25.     ) {
  26.     }
  28.     protected function supports(string $attribute, $subject): bool
  29.     {
  30.         return (bool)RolePermissionEnum::tryFrom($attribute);
  31.     }
  33.     /**
  34.      * @throws UserOrganizationNotFoundException
  35.      */
  36.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  37.     {
  38.         if (!$token->getUser()) {
  39.             return false;
  40.         }
  42.         try {
  43.             $session = $this->sessionProvider->provide();
  44.         } catch (Throwable) {
  45.             return false;
  46.         }
  48.         if (!$session->has($this->organizationBinder::SESSION_USER_ORGANIZATION_KEY)) {
  49.             return false;
  50.         }
  52.         $userOrganization = $this->provider->provide(
  53.             $session->get($this->organizationBinder::SESSION_USER_ORGANIZATION_KEY)
  54.         );
  56.         $userPermissions = $this->permissionRepository->findForUserInOrganization(
  57.             $userOrganization->getOrganization(),
  58.             $token->getUser()
  59.         );
  60.         $permissionNames = array_map(fn(Permission $permission) => $permission->getValue(), $userPermissions);
  62.         return in_array($attribute, $permissionNames);
  63.     }
  64. }