src/Bidcoz/Bundle/CoreBundle/Security/Authorization/Voter/OrganizationPaymentPlanVoter.php line 15

Open in your IDE?
  1. <?php
  3. namespace Bidcoz\Bundle\CoreBundle\Security\Authorization\Voter;
  5. use Bidcoz\Bundle\CoreBundle\Entity\Organization;
  6. use Bidcoz\Bundle\CoreBundle\Services\PermissionManager;
  7. use RS\DiExtraBundle\Annotation as DI;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. /**
  12.  * @DI\Service
  13.  * @DI\Tag("security.voter")
  14.  */
  15. class OrganizationPaymentPlanVoter extends Voter
  16. {
  17.     protected $permissionManager;
  19.     /**
  20.      * @DI\InjectParams({
  21.      *      "permissionManager" = @DI\Inject("permission_manager"),
  22.      * })
  23.      */
  24.     public function __construct(PermissionManager $permissionManager)
  25.     {
  26.         $this->permissionManager = $permissionManager;
  27.     }
  29.     protected function supports($attribute, $subject)
  30.     {
  31.         $orgVoterAttributes = [
  32.             OrganizationVoter::VIEW,
  33.             OrganizationVoter::MANAGE,
  34.             OrganizationVoter::EMAIL,
  35.             OrganizationVoter::CONTACTS,
  36.             OrganizationVoter::ADMIN,
  37.         ];
  39.         return $subject instanceof Organization && !in_array($attribute, $orgVoterAttributes);
  40.     }
  42.     /**
  43.      * @param string       $attribute
  44.      * @param Organization $organization
  45.      */
  46.     protected function voteOnAttribute($attribute, $organization, TokenInterface $token): bool
  47.     {
  48.         $paymentPlan = $organization->getPaymentModel();
  49.         if ($this->permissionManager->isAllowedByPaymentPlan($attribute, $paymentPlan)) {
  50.             return true;
  51.         }
  53.         return false;
  54.     }
  55. }