src/Security/Voter/SocialConversationVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\SocialConversation;
  6. use App\Entity\User;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. class SocialConversationVoter extends Voter
  11. {
  12.     public const VIEW = 'SOCIAL_VIEW';
  13.     public const REPLY = 'SOCIAL_REPLY';
  14.     public const MANAGE = 'SOCIAL_MANAGE';
  15.     public const QUALIFY = 'SOCIAL_QUALIFY';
  16.     public const FOLLOW = 'SOCIAL_FOLLOW';
  17.     public const CONVERT_CLIENT = 'SOCIAL_CONVERT_CLIENT';
  18.     public const CONVERT_ORDER = 'SOCIAL_CONVERT_ORDER';
  20.     protected function supports(string $attribute, $subject): bool
  21.     {
  22.         return in_array($attribute, [self::VIEW, self::REPLY, self::MANAGE, self::QUALIFY, self::FOLLOW, self::CONVERT_CLIENT, self::CONVERT_ORDER], true)
  23.             && $subject instanceof SocialConversation;
  24.     }
  26.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  27.     {
  28.         $user = $token->getUser();
  29.         if (!$user instanceof User) {
  30.             return false;
  31.         }
  33.         if (in_array('ROLE_SUPER_ADMIN', (array) $user->getRoles(), true)) {
  34.             return true;
  35.         }
  37.         $rights = (array) $user->getArrayRight();
  39.         if (!in_array('SOCIAL_INBOX', $rights, true)) {
  40.             return false;
  41.         }
  43.         /** @var SocialConversation $conversation */
  44.         $conversation = $subject;
  46.         return match ($attribute) {
  47.             self::VIEW => true,
  48.             self::REPLY => in_array('SOCIAL_INBOX_REPLY', $rights, true),
  49.             self::MANAGE => in_array('SOCIAL_INBOX_ASSIGN', $rights, true)
  50.                 || $conversation->getAssignedTo()?->getId() === $user->getId(),
  51.             self::QUALIFY => in_array('SOCIAL_INBOX_QUALIFY', $rights, true)
  52.                 || in_array('SOCIAL_INBOX_ASSIGN', $rights, true)
  53.                 || $conversation->getAssignedTo()?->getId() === $user->getId(),
  54.             self::FOLLOW => in_array('SOCIAL_INBOX_QUALIFY', $rights, true)
  55.                 || in_array('SOCIAL_INBOX_ASSIGN', $rights, true)
  56.                 || $conversation->getAssignedTo()?->getId() === $user->getId(),
  57.             self::CONVERT_CLIENT => in_array('SOCIAL_INBOX_CONVERT_CLIENT', $rights, true)
  58.                 || in_array('USERS_CREATE', $rights, true),
  59.             self::CONVERT_ORDER => in_array('SOCIAL_INBOX_CONVERT_ORDER', $rights, true)
  60.                 || in_array('DOCUMENT_CLIENT_CREATE', $rights, true),
  61.             default => false,
  62.         };
  63.     }
  64. }