vendor/nellapp/sdk-bundle/src/Permission/Security/Voter/ChannelUserPermissionResourceVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace Nellapp\Bundle\SDKBundle\Permission\Security\Voter;
  5. use Nellapp\Bundle\SDKBundle\Auth\Entity\UserInterface;
  6. use Nellapp\Bundle\SDKBundle\Permission\ChannelUserPermissionService;
  7. use Nellapp\Bundle\SDKBundle\Permission\Entity\ChannelResourceInterface;
  8. use Nellapp\Bundle\SDKBundle\Permission\Security\Authorization\AuthorizationHelper;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. class ChannelUserPermissionResourceVoter extends Voter
  13. {
  14.     public function __construct(
  15.         private ChannelUserPermissionService $channelUserPermissionService,
  16.         private AuthorizationHelper          $authorizationHelper,
  17.     )
  18.     {
  19.     }
  21.     public function supportsAttribute(string $attribute): bool
  22.     {
  23.         return str_starts_with($attribute, 'CHANNEL_USER_PERM');
  24.     }
  26.     public function supportsType(string $subjectType): bool
  27.     {
  28.         return is_subclass_of($subjectType, ChannelResourceInterface::class);
  29.     }
  31.     protected function supports(string $attribute, $subject): bool
  32.     {
  33.         return $this->supportsType($subject::class) && $this->supportsAttribute($attribute);
  34.     }
  36.     /**
  37.      * @param string $attribute
  38.      * @param ChannelResourceInterface $subject
  39.      * @param TokenInterface $token
  40.      * @return bool
  41.      */
  42.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  43.     {
  44.         $user = $token->getUser();
  45.         if (!$user instanceof UserInterface) {
  46.             return false;
  47.         }
  49.         $channel = $subject->getOwnerChannel();
  50.         $channelUserData = $user->getChannelUserDataByChannel($channel);
  51.         if ($channelUserData === null) {
  52.             return false;
  53.         }
  55.         if ($this->authorizationHelper->isUserGranted($user, $attribute, $channel)) {
  56.             return true;
  57.         }
  59.         return $this->channelUserPermissionService->hasAccess($channelUserData, $subject, $attribute);
  60.     }
  61. }