vendor/nellapp/sdk-bundle/src/Permission/Security/Voter/ChannelUserPermissionResourceVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace Nellapp\Bundle\SDKBundle\Permission\Security\Voter;
  5. use Nellapp\Bundle\SDKBundle\Auth\Entity\UserInterface;
  6. use Nellapp\Bundle\SDKBundle\Permission\ChannelUserPermissionService;
  7. use Nellapp\Bundle\SDKBundle\Permission\Entity\ChannelResourceInterface;
  8. use Nellapp\Bundle\SDKBundle\Permission\Security\Authorization\AuthorizationHelper;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. class ChannelUserPermissionResourceVoter extends Voter
  13. {
  14. public function __construct(
  15. private ChannelUserPermissionService $channelUserPermissionService,
  16. private AuthorizationHelper $authorizationHelper,
  17. )
  18. {
  19. }
  21. public function supportsAttribute(string $attribute): bool
  22. {
  23. return str_starts_with($attribute, 'CHANNEL_USER_PERM');
  24. }
  26. public function supportsType(string $subjectType): bool
  27. {
  28. return is_subclass_of($subjectType, ChannelResourceInterface::class);
  29. }
  31. protected function supports(string $attribute, $subject): bool
  32. {
  33. return $this->supportsType($subject::class) && $this->supportsAttribute($attribute);
  34. }
  36. /**
  37. * @param string $attribute
  38. * @param ChannelResourceInterface $subject
  39. * @param TokenInterface $token
  40. * @return bool
  41. */
  42. protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  43. {
  44. $user = $token->getUser();
  45. if (!$user instanceof UserInterface) {
  46. return false;
  47. }
  49. $channel = $subject->getOwnerChannel();
  50. $channelUserData = $user->getChannelUserDataByChannel($channel);
  51. if ($channelUserData === null) {
  52. return false;
  53. }
  55. if ($this->authorizationHelper->isUserGranted($user, $attribute, $channel)) {
  56. return true;
  57. }
  59. return $this->channelUserPermissionService->hasAccess($channelUserData, $subject, $attribute);
  60. }
  61. }