app/Service/Security/Voter/InWorkspace/CreateInWorkspaceVoter.php line 10

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Sq\Service\Security\Voter\InWorkspace;
  5. use Sq\Entity\Schema\ORM as Entity;
  6. use Sq\Entity\Schema\ORM\UserOrganizationAssignment;
  7. use Sq\Service\Security\Voter\SecurityAttributes;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. class CreateInWorkspaceVoter extends AbstractInWorkspaceVoter
  11. {
  12.     protected function getSupportedAttributeName(): string
  13.     {
  14.         return SecurityAttributes::CREATE;
  15.     }
  17.     protected function getValidRolesForAttribute(): array
  18.     {
  19.         return [
  20.             UserOrganizationAssignment::ROLE_OWNER,
  21.             UserOrganizationAssignment::ROLE_ADMIN,
  22.             UserOrganizationAssignment::ROLE_EDITOR,
  23.         ];
  24.     }
  26.     protected function voteSpecificToSubjectAndRole($subject, string $role, TokenInterface $token): ?bool
  27.     {
  28.         if ($subject instanceof Entity\PostFamilyComment)
  29.         {
  30.             if ($subject->getWorkspace()->getOrganization()->getLegacyMember()->wasLegacySignup())
  31.             {
  32.                 return false;
  33.             }
  35.             $allowedRoles = array_merge($this->getValidRolesForAttribute(), [UserOrganizationAssignment::ROLE_CLIENT]);
  37.             return in_array($role, $allowedRoles, true);
  38.         }
  40.         return null;
  41.     }
  43.     protected function isAllowedWhenImpersonating(): bool
  44.     {
  45.         return false;
  46.     }
  47. }