src/Infrastructure/Security/DiagnosticVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Infrastructure\Security;
  5. use App\Domain\Common\Entity\User;
  6. use App\Domain\Common\Enum\UserTypeEnum;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. class DiagnosticVoter extends Voter
  11. {
  12. public const SHOW_DIAGNOSTIC_LIST = 'SHOW_DIAGNOSTIC_LIST';
  13. public const EXPORT_DIAGNOSTIC = 'EXPORT_DIAGNOSTIC';
  15. protected function supports(string $attribute, $subject): bool
  16. {
  17. return \in_array($attribute, [
  18. self::SHOW_DIAGNOSTIC_LIST,
  19. self::EXPORT_DIAGNOSTIC,
  20. ], true);
  21. }
  23. protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  24. {
  25. $grantedUserTypes = [
  26. UserTypeEnum::TYPE_ADMIN,
  27. UserTypeEnum::TYPE_OPAC_VALIDATEUR_N1,
  28. UserTypeEnum::TYPE_OPAC_VALIDATEUR_N2,
  29. UserTypeEnum::TYPE_OPAC_READ_ONLY,
  30. UserTypeEnum::TYPE_DIAGNOSTIQUEUR,
  31. ];
  33. $user = $token->getUser();
  34. if (!$user instanceof User) {
  35. return false;
  36. }
  38. $isGranted = \in_array($user->getType(), $grantedUserTypes, true);
  40. return match ($attribute) {
  41. self::SHOW_DIAGNOSTIC_LIST => $isGranted,
  42. self::EXPORT_DIAGNOSTIC => $isGranted && UserTypeEnum::TYPE_DIAGNOSTIQUEUR !== $user->getType(),
  43. default => false,
  44. };
  45. }
  46. }