src/Infrastructure/Security/DiagnosticVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Infrastructure\Security;
  5. use App\Domain\Common\Entity\User;
  6. use App\Domain\Common\Enum\UserTypeEnum;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. class DiagnosticVoter extends Voter
  11. {
  12.     public const SHOW_DIAGNOSTIC_LIST = 'SHOW_DIAGNOSTIC_LIST';
  13.     public const EXPORT_DIAGNOSTIC = 'EXPORT_DIAGNOSTIC';
  15.     protected function supports(string $attribute, $subject): bool
  16.     {
  17.         return \in_array($attribute, [
  18.             self::SHOW_DIAGNOSTIC_LIST,
  19.             self::EXPORT_DIAGNOSTIC,
  20.         ], true);
  21.     }
  23.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  24.     {
  25.         $grantedUserTypes = [
  26.             UserTypeEnum::TYPE_ADMIN,
  27.             UserTypeEnum::TYPE_OPAC_VALIDATEUR_N1,
  28.             UserTypeEnum::TYPE_OPAC_VALIDATEUR_N2,
  29.             UserTypeEnum::TYPE_OPAC_READ_ONLY,
  30.             UserTypeEnum::TYPE_DIAGNOSTIQUEUR,
  31.         ];
  33.         $user = $token->getUser();
  34.         if (!$user instanceof User) {
  35.             return false;
  36.         }
  38.         $isGranted = \in_array($user->getType(), $grantedUserTypes, true);
  40.         return match ($attribute) {
  41.             self::SHOW_DIAGNOSTIC_LIST => $isGranted,
  42.             self::EXPORT_DIAGNOSTIC => $isGranted && UserTypeEnum::TYPE_DIAGNOSTIQUEUR !== $user->getType(),
  43.             default => false,
  44.         };
  45.     }
  46. }