src/Security/Voter/Scholar/PracticalCaseUserVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter\Scholar;
  5. use App\Entity\Scholar\PracticalCase\PracticalCaseUser;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  8. use Symfony\Component\Security\Core\Security;
  10. class PracticalCaseUserVoter implements VoterInterface
  11. {
  12. const PERM_ASSIGNED = 'PERM_ASSIGNED';
  13. public function __construct(
  14. private Security $security,
  15. )
  16. {
  17. }
  19. public function vote(TokenInterface $token, $subject, array $attributes): int
  20. {
  21. if (!in_array(self::PERM_ASSIGNED, $attributes)) {
  22. return VoterInterface::ACCESS_ABSTAIN;
  23. }
  25. if (!$subject instanceof PracticalCaseUser) {
  26. return self::ACCESS_ABSTAIN;
  27. }
  29. $lastResponse = $subject->getPracticalCaseResponses()->last();
  30. if (!$lastResponse) {
  31. return self::ACCESS_DENIED;
  32. }
  34. $assignee = $lastResponse->getAssignedTo();
  35. if (null !== $assignee && $token->getUser() === $assignee) {
  36. return self::ACCESS_GRANTED;
  37. }
  39. return $this->security->isGranted('CHANNEL_USER_PERM_LESSON_SHOW', $subject->getPracticalCase()->getOwnerChannel());
  40. }
  41. }