src/Security/Voter/StatefulEntityEditVoter.php line 13

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Security\Voter;
  7. use App\Entity\StatefulInterface;
  8. use App\Entity\User;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. class StatefulEntityEditVoter extends Voter
  14. {
  15.     public const EDIT = 'EDIT';
  17.     private AuthorizationCheckerInterface $authorizationChecker;
  19.     /**
  20.      * ShowVoter constructor.
  21.      */
  22.     public function __construct(AuthorizationCheckerInterface $authorizationChecker)
  23.     {
  24.         $this->authorizationChecker = $authorizationChecker;
  25.     }
  27.     protected function supports(string $attribute, $subject)
  28.     {
  29.         if ($attribute === self::EDIT && $subject instanceof StatefulInterface) {
  30.             return true;
  31.         }
  33.         return false;
  34.     }
  36.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token)
  37.     {
  38.         assert($subject instanceof StatefulInterface);
  40.         // 管理者は全て編集可能
  41.         if ($this->authorizationChecker->isGranted(User::ROLE_SUPER_ADMIN)) {
  42.             return true;
  43.         }
  45.         // 編集者は下書または完了のみ
  46.         if ($this->authorizationChecker->isGranted(User::ROLE_EDITOR)) {
  47.             return $subject->getStatus()->isEditableByEditor();
  48.         }
  50.         return false;
  51.     }
  52. }