src/Security/Voter/TransactionVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\Enum\RoleEnum;
  6. use App\Entity\RoleManagement;
  7. use App\Entity\Transaction;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Symfony\Component\Security\Core\Security;
  12. class TransactionVoter extends Voter
  13. {
  15.     public function __construct(private Security $security)
  16.     {}
  18.     protected function supports($attribute, $subject): bool
  19.     {
  20.         $supportsAttribute = in_array($attribute, ['TRANSACTION_CREATE', 'TRANSACTION_READ', 'TRANSACTION_EDIT', 'TRANSACTION_DELETE']);
  21.         $supportsSubject = $subject instanceof Transaction;
  23.         return $supportsAttribute && $supportsSubject;
  24.     }
  26.     /**
  27.      * @param string $attribute
  28.      * @param Transaction $subject
  29.      * @param TokenInterface $token
  30.      * @return bool
  31.      */
  32.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  33.     {
  34.         if($this->security->isGranted(RoleEnum::SUPER_ADMIN->value)) return true;
  36.         // TODO belongs to user
  37.         // refactor api
  39.         return false;
  40.     }
  41. }