app/Service/Security/Voter/InWorkspace/EditInWorkspaceVoter.php line 10

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Sq\Service\Security\Voter\InWorkspace;
  5. use Sq\Entity\Schema\ORM as Entity;
  6. use Sq\Entity\Schema\ORM\UserOrganizationAssignment;
  7. use Sq\Service\Security\Voter\SecurityAttributes;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. class EditInWorkspaceVoter extends AbstractInWorkspaceVoter
  11. {
  12.     protected function getSupportedAttributeName(): string
  13.     {
  14.         return SecurityAttributes::EDIT;
  15.     }
  17.     protected function getValidRolesForAttribute(): array
  18.     {
  19.         return [
  20.             UserOrganizationAssignment::ROLE_OWNER,
  21.             UserOrganizationAssignment::ROLE_ADMIN,
  22.             UserOrganizationAssignment::ROLE_EDITOR,
  23.         ];
  24.     }
  26.     protected function voteSpecificToSubjectAndRole($subject, string $role, TokenInterface $token): ?bool
  27.     {
  28.         if ($subject instanceof Entity\PostFamilyComment)
  29.         {
  30.             if ($subject->getWorkspace()->getOrganization()->getLegacyMember()->wasLegacySignup())
  31.             {
  32.                 return false;
  33.             }
  35.             $allowedRoles = array_merge($this->getValidRolesForAttribute(), [UserOrganizationAssignment::ROLE_CLIENT]);
  36.             if (!in_array($role, $allowedRoles, true))
  37.             {
  38.                 return false;
  39.             }
  41.             /** @var Entity\User $loggedInUser */
  42.             $loggedInUser = $token->getUser();
  44.             return $subject->getAuthor()->getId() === $loggedInUser->getId();
  45.         }
  47.         return null;
  48.     }
  50.     protected function isAllowedWhenImpersonating(): bool
  51.     {
  52.         return false;
  53.     }
  54. }