src/Security/Voter/ReportPdfVoter.php line 13

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Security\Voter;
  7. use App\Entity\Consultation\Report;
  8. use App\Entity\User;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. class ReportPdfVoter extends Voter
  14. {
  15.     public const SHOW_REPORT_PDF = 'SHOW_REPORT_PDF';
  16.     public const SHOW_ANSWER_PDF = 'SHOW_ANSWER_PDF';
  17.     public const SHOW_REPORT_OLD_PDF = 'SHOW_REPORT_OLD_PDF';
  18.     public const SHOW_ANSWER_OLD1_PDF = 'SHOW_ANSWER_OLD1_PDF';
  19.     public const SHOW_ANSWER_OLD2_PDF = 'SHOW_ANSWER_OLD2_PDF';
  21.     private AuthorizationCheckerInterface $authorizationChecker;
  23.     /**
  24.      * ReportPdfVoter constructor.
  25.      */
  26.     public function __construct(AuthorizationCheckerInterface $authorizationChecker)
  27.     {
  28.         $this->authorizationChecker = $authorizationChecker;
  29.     }
  31.     protected function supports(string $attribute, $subject)
  32.     {
  33.         if (!$subject instanceof Report) {
  34.             return false;
  35.         }
  37.         return in_array($attribute, [
  38.             self::SHOW_REPORT_PDF,
  39.             self::SHOW_ANSWER_PDF,
  40.             self::SHOW_REPORT_OLD_PDF,
  41.             self::SHOW_ANSWER_OLD1_PDF,
  42.             self::SHOW_ANSWER_OLD2_PDF,
  43.         ]);
  44.     }
  46.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token)
  47.     {
  48.         assert($subject instanceof Report);
  50.         // NVCアカウントは閲覧可能
  51.         if ($this->authorizationChecker->isGranted('ROLE_NVC')) {
  52.             return true;
  53.         }
  55.         $user = $token->getUser();
  56.         if (!$user instanceof User) {
  57.             return false;
  58.         }
  60.         return $user === $subject->getUser();
  61.     }
  62. }