src/Bidcoz/Bundle/CoreBundle/Security/Authorization/Voter/ContactVoter.php line 14

Open in your IDE?
  1. <?php
  3. namespace Bidcoz\Bundle\CoreBundle\Security\Authorization\Voter;
  5. use Bidcoz\Bundle\CoreBundle\Entity\Contact\Contact;
  6. use RS\DiExtraBundle\Annotation as DI;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. /**
  11.  * @DI\Service
  12.  * @DI\Tag("security.voter")
  13.  */
  14. class ContactVoter extends Voter
  15. {
  16.     const EDIT_EMAIL = 'EDIT_EMAIL';
  18.     protected function supports($attribute, $subject)
  19.     {
  20.         return $subject instanceof Contact && self::EDIT_EMAIL === $attribute;
  21.     }
  23.     protected function voteOnAttribute($attribute, $contact, TokenInterface $token)
  24.     {
  25.         if (!$contact instanceof Contact) {
  26.             return false;
  27.         }
  29.         $user = $contact->getUser();
  30.         if (!$user->hasLoggedIn()) {
  31.             return true;
  32.         }
  34.         if ($user->hasRole('ROLE_SUPER_ADMIN')) {
  35.             return true;
  36.         }
  38.         return false;
  39.     }
  40. }