src/Security/ExternalObjectVoter.php line 23

Open in your IDE?
  1. <?php
  2. //------------------------------------------------------------------------------
  3. // src/Security/ExternalObjectVoter.php
  4. //------------------------------------------------------------------------------
  5. namespace App\Security;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Doctrine\Persistence\ManagerRegistry;
  12. use App\Entity\Access;
  13. use App\Entity\Config\Config;
  14. use App\Entity\Config\Module;
  15. use App\Entity\HR\AccessFunction;
  16. use App\Entity\Platform\Devis\Devis;
  17. use App\Entity\Platform\Devis\ExternalDevis;
  18. use App\Entity\Platform\Invoice\ExternalInvoice;
  19. use App\Entity\Planning\ExternalTask;
  20. use App\Entity\Security\Acl;
  21. use App\Entity\Webapp\ExternalDocument;
  23. class ExternalObjectVoter extends Voter
  24. {
  25.     //--------------------------------------------------------------------------------
  26.     // is_granted constants
  27.     const VIEW = "view_external_object";
  29.     const VIEW_DEVIS = "view_external_devis";
  30.     const VIEW_INVOICE = "view_external_invoice";
  31.     const VIEW_TASK = "view_external_task";
  32.     const VIEW_DOC = "view_external_document";
  34.     const IS_GRANTED_CONSTANTS = array(
  35.         self::VIEW,
  37.         self::VIEW_DEVIS,
  38.         self::VIEW_INVOICE,
  39.         self::VIEW_TASK,
  40.         self::VIEW_DOC,
  41.     );
  42.     //--------------------------------------------------------------------------------
  44.     public function __construct(AccessDecisionManagerInterface $accessDecisionManager, ManagerRegistry $doctrine)
  45.     {
  46.         $this->accessDecisionManager = $accessDecisionManager;
  47.         $this->em = $doctrine->getManager();
  48.     }
  50.     // Plan.io Task #4453 [See AccessVoter for details]
  51.     public function supportsAttribute(string $attribute): bool
  52.     {
  53.         return in_array($attribute, self::IS_GRANTED_CONSTANTS, true);
  54.     }
  55.     
  56.     protected function supports(string $attribute, $subject = null): bool
  57.     {
  58.         // if the attribute isn't one we support, return false
  59.         if (!in_array($attribute, self::IS_GRANTED_CONSTANTS))
  60.         {
  61.             return false;
  62.         }
  64.         if ($subject !== null && !($subject instanceof ExternalDevis || $subject instanceof ExternalInvoice || $subject instanceof ExternalDocument || $subject instanceof ExternalTask))
  65.         {
  66.             return false;
  67.         }
  69.         return true;
  70.     }
  72.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  73.     {
  74.         $user = $token->getUser();
  76.         if (!$user instanceof Access)
  77.         {
  78.             // the user must be logged in; if not, deny access
  79.             return false;
  80.         }
  82.         // The user must have a function; if not deny access
  83.         $function = $user->getFunction();
  84.         if ($function === null)        return false;
  86.         // Plan.io Task #3710 : Get current group
  87.         $currentGroup = $user->getSocietyGroup();
  88.         if ($currentGroup === null)
  89.             return false;
  91.         $this->currentGroup = $currentGroup;
  93.         // Plan.io Task #3230
  94.         // In order to take sharing into account,
  95.         // decide the viewing of the ExternalObject based on its Mission
  96.         $mission = $subject->getMission();
  97.         if ($mission === null)
  98.         {
  99.             // This should not happen
  100.             return false;
  101.         }
  103.         return $this->accessDecisionManager->decide($token, ['view_mission'], $mission);
  105.         throw new \LogicException('This code should not be reached!');
  106.     }
  107. }