src/Security/Voter/FileVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\CompanyDemand;
  6. use App\Entity\DemandFile;
  7. use App\Entity\File;
  8. use App\Entity\User;
  9. use LogicException;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. class FileVoter extends Voter
  14. {
  15.     protected function supports(string $attribute, $subject): bool
  16.     {
  17.         // replace with your own logic
  18.         // https://symfony.com/doc/current/security/voters.html
  19.         return in_array($attribute, ['FILE_DOWNLOAD', 'FILE_REMOVE'], true)
  20.             && $subject instanceof File;
  21.     }
  23.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  24.     {
  25.         $user = $token->getUser();
  26.         // if the user is anonymous, do not grant access
  27.         if (!$user instanceof User) {
  28.             return false;
  29.         }
  31.         /** @var File $file */
  32.         $file = $subject;
  34.         switch ($attribute) {
  35.             case 'FILE_REMOVE':
  36.                 return $file->getUser() === $user;
  37.             case 'FILE_DOWNLOAD':
  38.                 if ($file->getUser() === $user) {
  39.                     return true;
  40.                 }
  42.                 if (in_array('ROLE_ADMIN', $user->getRoles(), true)) {
  43.                     return true;
  44.                 }
  46.                 // at this stage, we already know that the current user is a company who is trying to download a demand file
  48.                 if ($file->getDemandFile()) {
  49.                     $demand = $file->getDemandFile()->getDemand();
  51.                     if ($file->getDemandFile()->getType() === DemandFile::USER_PROOF_TYPE) {
  52.                         return false;
  53.                     }
  55.                     return $demand->getCompanyDemands()->exists(function (int $key, CompanyDemand $companyDemand) use ($user): bool {
  56.                         return $companyDemand->getCompany() === $user->getCompanies()->first();
  57.                     });
  58.                 }
  60.                 if ($file->getDemandTree()) {
  61.                     $demand = $file->getDemandTree()->getDemand();
  63.                     return $demand->getCompanyDemands()->exists(function (int $key, CompanyDemand $companyDemand) use ($user): bool {
  64.                         return $companyDemand->getCompany() === $user->getCompanies()->first();
  65.                     });
  66.                 }
  68.                 throw new LogicException('Unexpected case.');
  69.         }
  71.         return false;
  72.     }
  73. }