src/Security/Voter/Admin/StatefulEntityActionVoter.php line 16

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Security\Voter\Admin;
  7. use App\Entity\StatefulInterface;
  8. use EasyCorp\Bundle\EasyAdminBundle\Config\Action;
  9. use EasyCorp\Bundle\EasyAdminBundle\Dto\ActionDto;
  10. use EasyCorp\Bundle\EasyAdminBundle\Dto\EntityDto;
  11. use EasyCorp\Bundle\EasyAdminBundle\Security\Permission;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  14. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  16. class StatefulEntityActionVoter extends Voter
  17. {
  18.     private AuthorizationCheckerInterface $authorizationChecker;
  20.     /**
  21.      * StatefulEntityActionVoter constructor.
  22.      */
  23.     public function __construct(AuthorizationCheckerInterface $authorizationChecker)
  24.     {
  25.         $this->authorizationChecker = $authorizationChecker;
  26.     }
  28.     protected function supports(string $attribute, $subject)
  29.     {
  30.         if ($attribute !== Permission::EA_EXECUTE_ACTION) {
  31.             return false;
  32.         }
  33.         if (empty($subject['action']) || empty($subject['entity'])) {
  34.             return false;
  35.         }
  36.         $entity = $subject['entity'];
  37.         if (!$entity instanceof EntityDto) {
  38.             return false;
  39.         }
  40.         $instance = $entity->getInstance();
  41.         if (!$instance instanceof StatefulInterface) {
  42.             return false;
  43.         }
  45.         $action = $subject['action'];
  46.         if (!$action instanceof ActionDto) {
  47.             return false;
  48.         }
  50.         return true;
  51.     }
  53.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token)
  54.     {
  55.         if ($this->authorizationChecker->isGranted('ROLE_SUPER_ADMIN')) {
  56.             return true;
  57.         }
  59.         if (!in_array($subject['action']->getName(), [Action::EDIT, Action::DELETE])) {
  60.             return true;
  61.         }
  63.         /** @var StatefulInterface $entity */
  64.         $entity = $subject['entity']->getInstance();
  66.         if ($this->authorizationChecker->isGranted('ROLE_EDITOR')) {
  67.             return $entity->getStatus()->isEditableByEditor();
  68.         }
  70.         return false;
  71.     }
  72. }