src/Security/Voter/VideoVoter.php line 15

Open in your IDE?
  1. <?php
  4. namespace App\Security\Voter;
  7. use App\Entity\Company;
  8. use App\Entity\User;
  9. use App\Entity\Video;
  10. use App\Repository\ExclusionsVideoRepository;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. use Symfony\Component\Security\Core\Security;
  15. class VideoVoter extends Voter
  16. {
  17.     /**
  18.      * @var Security
  19.      */
  20.     private $security = null;
  22.     /**
  23.      * @var ExclusionsVideoRepository
  24.      */
  25.     private $exclusionsVideoRepository;
  27.     /**
  28.      * VideoVoter constructor.
  29.      * @param Security $security
  30.      * @param ExclusionsVideoRepository $exclusionsVideoRepository
  31.      */
  32.     public function __construct(Security $security, ExclusionsVideoRepository $exclusionsVideoRepository)
  33.     {
  34.         $this->security = $security;
  35.         $this->exclusionsVideoRepository = $exclusionsVideoRepository;
  36.     }
  38.     protected function supports(string $attribute, $subject): bool
  39.     {
  40.         $supportAttr = in_array($attribute, ['VIDEO_GET']);
  41.         $supportObject = ($subject instanceof Video);
  42.         return $supportAttr && $supportObject;
  43.     }
  45.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  46.     {
  47.         if ($attribute == 'VIDEO_GET') {
  48.             $user = $this->security->getUser();
  49.             if ($user instanceof User && $user->getCompany() instanceof Company && $this->security->isGranted('ROLE_USER')) {
  50.                 return !$this->exclusionsVideoRepository->isExclusion($user->getCompany(), $subject);
  51.             }
  52.         }
  53.         return true;
  54.     }
  55. }