src/StartPlatz/Bundle/GruendungsstipendiumBundle/Security/GsApplicationVoter.php line 10

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace App\StartPlatz\Bundle\GruendungsstipendiumBundle\Security;
  5. use App\StartPlatz\Bundle\StartupBundle\Entity\Application;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  8. use Symfony\Component\Security\Core\Security;
  10. class GsApplicationVoter extends Voter
  11. {
  12.     public const APPROVE = 'GS_APPROVE';
  13.     public const REJECT = 'GS_REJECT';
  14.     public const ADMIT_JURY = 'GS_ADMIT_JURY';
  15.     public const START_FUNDING = 'GS_START_FUNDING';
  16.     public const CLOSE_PARTICIPATION = 'GS_CLOSE_PARTICIPATION';
  17.     public const FINALIZE = 'GS_FINALIZE';
  18.     public const LINK_MEMBER = 'GS_LINK_MEMBER';
  19.     public const LINK_TEAM = 'GS_LINK_TEAM';
  20.     public const RESET = 'GS_RESET';
  21.     public const DELETE = 'GS_DELETE';
  23.     private const SUPPORTED = [
  24.         self::APPROVE,
  25.         self::REJECT,
  26.         self::ADMIT_JURY,
  27.         self::START_FUNDING,
  28.         self::CLOSE_PARTICIPATION,
  29.         self::FINALIZE,
  30.         self::LINK_MEMBER,
  31.         self::LINK_TEAM,
  32.         self::RESET,
  33.         self::DELETE,
  34.     ];
  36.     public function __construct(
  37.         private readonly Security $security
  38.     ) {}
  40.     protected function supports(string $attribute, $subject): bool
  41.     {
  42.         return in_array($attribute, self::SUPPORTED, true)
  43.             && $subject instanceof Application;
  44.     }
  46.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  47.     {
  48.         if (!$this->security->isGranted('ROLE_ADMIN')) {
  49.             return false;
  50.         }
  52.         return match ($attribute) {
  53.             self::RESET, self::DELETE => $this->security->isGranted('ROLE_MASTER'),
  54.             default => true,
  55.         };
  56.     }
  57. }