src/Infrastructure/Security/DiagnosticValidationVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace App\Infrastructure\Security;
  5. use App\Domain\Common\Entity\EnregistrementDiagnostic;
  6. use App\Domain\Common\Entity\User;
  7. use App\Domain\Common\Enum\EnregistrementDiagnosticStateEnum;
  8. use App\Domain\Common\Enum\EntrepriseValidationTypeEnum;
  9. use App\Domain\Common\Enum\UserTypeEnum;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. class DiagnosticValidationVoter extends Voter
  14. {
  15. public const SHOW_VALIDATION_PAGE = 'SHOW_VALIDATION_PAGE';
  16. public const VALIDATE_DIAGNOSTIC = 'VALIDATE_DIAGNOSTIC';
  18. protected function supports(string $attribute, $subject): bool
  19. {
  20. if (!$subject instanceof EnregistrementDiagnostic) {
  21. return false;
  22. }
  24. return \in_array($attribute, [self::SHOW_VALIDATION_PAGE, self::VALIDATE_DIAGNOSTIC]);
  25. }
  27. protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  28. {
  29. $user = $token->getUser();
  30. if (!$user instanceof User) {
  31. return false;
  32. }
  33. /** @var EnregistrementDiagnostic $enregistrementDiagnostic */
  34. $enregistrementDiagnostic = $subject;
  36. return match ($attribute) {
  37. self::SHOW_VALIDATION_PAGE => $this->canShowValidationPage($enregistrementDiagnostic, $user),
  38. self::VALIDATE_DIAGNOSTIC => $this->canValidate($enregistrementDiagnostic, $user),
  39. default => false,
  40. };
  41. }
  43. private function canShowValidationPage(EnregistrementDiagnostic $enregistrementDiagnostic, User $user): bool
  44. {
  45. $grantedUserTypes = [
  46. UserTypeEnum::TYPE_ADMIN,
  47. UserTypeEnum::TYPE_OPAC_VALIDATEUR_N1,
  48. UserTypeEnum::TYPE_OPAC_VALIDATEUR_N2,
  49. UserTypeEnum::TYPE_DIAGNOSTIQUEUR,
  50. ];
  52. return \in_array($user->getType(), $grantedUserTypes);
  53. }
  55. private function canValidate(EnregistrementDiagnostic $enregistrementDiagnostic, User $user): bool
  56. {
  57. $grantedUserTypes = [
  58. UserTypeEnum::TYPE_ADMIN,
  59. UserTypeEnum::TYPE_OPAC_VALIDATEUR_N1,
  60. UserTypeEnum::TYPE_OPAC_VALIDATEUR_N2,
  61. ];
  63. if (EnregistrementDiagnosticStateEnum::STATE_WAITING_VALIDATION_N1 !== $enregistrementDiagnostic->getState()
  64. && EnregistrementDiagnosticStateEnum::STATE_WAITING_VALIDATION_N2 !== $enregistrementDiagnostic->getState()) {
  65. return false;
  66. }
  68. if (UserTypeEnum::TYPE_OPAC_VALIDATEUR_N1 === $user->getType()
  69. && EnregistrementDiagnosticStateEnum::STATE_WAITING_VALIDATION_N2 === $enregistrementDiagnostic->getState()) {
  70. return false;
  71. }
  73. if (UserTypeEnum::TYPE_OPAC_VALIDATEUR_N2 === $user->getType()
  74. && EnregistrementDiagnosticStateEnum::STATE_WAITING_VALIDATION_N1 === $enregistrementDiagnostic->getState()
  75. && EntrepriseValidationTypeEnum::VALIDATION_TYPE_1_STEP !== $enregistrementDiagnostic->getEntreprise()->getValidationType()) {
  76. return false;
  77. }
  79. return \in_array($user->getType(), $grantedUserTypes);
  80. }
  81. }