src/School/Application/Security/TutoringScopeVoter.php line 30

Open in your IDE?
  1. <?php
  2. /**
  3.  * This file is part of the educat package.
  4.  *
  5.  * (c) Solvee
  6.  *
  7.  * For the full copyright and license information, please view the LICENSE
  8.  * file that was distributed with this source code.
  9.  */
  11. declare(strict_types=1);
  13. namespace App\School\Application\Security;
  15. use App\Common\Model\Core\UserInterface;
  16. use App\Common\Model\School\TutoringScopeInterface;
  17. use App\Common\Security\ObjectOwnerVoterInterface;
  18. use App\Common\Security\ObjectOwnerVoterTrait;
  19. use App\Common\Security\VoterTrait;
  20. use LogicException;
  21. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  22. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  23. use function in_array;
  25. /**
  26.  * Class TutoringScopeVoter
  27.  *
  28.  * @author Kamil Kozaczyński <kozaczynski.kamil@gmail.com>
  29.  */
  30. class TutoringScopeVoter extends Voter implements ObjectOwnerVoterInterface
  31. {
  32.     use VoterTrait, ObjectOwnerVoterTrait;
  34.     /**
  35.      * @inheritDoc
  36.      */
  37.     protected function supports(string $attribute, $subject): bool
  38.     {
  39.         if (!in_array(
  40.             $attribute,
  41.             [
  42.                 self::OBJECT_OWNER,
  43.             ],
  44.             true
  45.         )) {
  46.             return false;
  47.         }
  49.         return $subject instanceof TutoringScopeInterface;
  50.     }
  52.     /**
  53.      * @param string                 $attribute
  54.      * @param TutoringScopeInterface $subject
  55.      * @param TokenInterface         $token
  56.      *
  57.      * @return bool
  58.      */
  59.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  60.     {
  61.         $user = $token->getUser();
  63.         if (!$user instanceof UserInterface) {
  64.             return false;
  65.         }
  67.         return match ($attribute) {
  68.             self::OBJECT_OWNER => $this->isObjectOwner($subject, $user->getAccount()),
  69.             default => throw new LogicException('This code should not be reached.')
  70.         };
  71.     }
  72. }