vendor/nellapp/sdk-bundle/src/Permission/Security/Voter/SharableChannelResourcePermissionVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace Nellapp\Bundle\SDKBundle\Permission\Security\Voter;
  5. use Nellapp\Bundle\SDKBundle\Auth\Entity\UserInterface;
  6. use Nellapp\Bundle\SDKBundle\Permission\Entity\ChannelResourceInterface;
  7. use Nellapp\Bundle\SDKBundle\Permission\SharablePermission\SharableChannelResourcePermissionService;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. class SharableChannelResourcePermissionVoter extends Voter
  12. {
  13.     public function __construct(
  14.         private SharableChannelResourcePermissionService $sharablePermissionService,
  15.     )
  16.     {
  17.     }
  19.     public function supportsAttribute(string $attribute): bool
  20.     {
  21.         return str_starts_with($attribute, 'CHANNEL_USER_PERM');
  22.     }
  24.     public function supportsType(string $subjectType): bool
  25.     {
  26.         return is_subclass_of($subjectType, ChannelResourceInterface::class) && $this->sharablePermissionService->hasSharablePermissionFor($subjectType);
  27.     }
  29.     protected function supports(string $attribute, $subject): bool
  30.     {
  31.         return $this->supportsAttribute($attribute) && $this->supportsType($subject::class);
  32.     }
  34.     /**
  35.      * @param string $attribute
  36.      * @param ChannelResourceInterface $subject
  37.      * @param TokenInterface $token
  38.      * @return bool
  39.      */
  40.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  41.     {
  42.         $user = $token->getUser();
  43.         if (!$user instanceof UserInterface) {
  44.             return false;
  45.         }
  47.         $channelUserData = $user->getChannelUserDataByChannel($subject->getOwnerChannel());
  48.         if ($channelUserData === null) {
  49.             return false;
  50.         }
  52.         return $this->sharablePermissionService->hasAccess($channelUserData, $subject, $attribute);
  53.     }
  54. }