src/Knitink/UniverseBundle/Security/TeamVoter.php line 19

Open in your IDE?
  1. <?php
  3. /**
  4.  * This file is part of the Knitink Project package.
  5.  *
  6.  * Created by Globunet Soluciones Tecnologicas, SL. on 13/01/17. <info@globunet.com>
  7.  * Copyright (c) 2016 Knitink Technologies, SL. All rights reserved.
  8.  */
  10. namespace Knitink\UniverseBundle\Security;
  12. use Knitink\UniverseBundle\Entity\Permission;
  13. use Knitink\UniverseBundle\Entity\Team;
  14. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  15. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  16. use Symfony\Component\HttpFoundation\Session\Session;
  17. use Globunet\DinamicDatabaseBundle\Services\DatabaseConnector;
  19. class TeamVoter extends Voter
  20. {
  21.     private $databaseConnector;
  22.     private $session;
  25.     public function __construct(DatabaseConnector $databaseConnector, Session $session)
  26.     {
  27.         $this->databaseConnector = $databaseConnector;
  28.         $this->session = $session;
  29.     }
  31.     protected function supports($attribute, $subject)
  32.     {
  33.         return $subject instanceof Team && $attribute === 'VOTER_KNITINK_UNIVERSE_TEAM';
  34.     }
  36.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  37.     {
  38.         $user = $token->getUser();
  40.         if(($user instanceof \Symfony\Component\Security\Core\User\User || $user instanceof \Knitink\CoreBundle\Entity\User)){
  41.             if(in_array("ROLE_SUPER_ADMIN", $user->getRoles()) || in_array("ROLE_KNK_UNIV_SUPER_ADMIN", $user->getRoles()) || in_array("ROLE_KNK_UNIV_ADMIN", $user->getRoles()))
  42.             return true;
  43.         }
  45.         if (!$user instanceof \Knitink\CoreBundle\Entity\User) {
  46.             return false;
  47.         }
  49.         return $this->checker($user, $attribute, $subject);
  51.     }
  53.     public function checker($user, $attribute, $subject, $em = null)
  54.     {
  55.         $database = $this->session->get('database');
  57.         if ($em == null) {
  58.             $this->databaseConnector->resetConnection($database, null, null, null, true);
  59.             $em = $this->databaseConnector->getEntityManager();
  60.         }
  62.         $entity = $em->getRepository(Permission::class)->findOneBy(['user' => $user->getId()]);
  64.         if ($entity != null) {
  65.             foreach ($entity->getTeams() as $team) {
  66.                 if ($team->getId() === $subject->getId()) {
  67.                     return true;
  68.                 }
  69.             }
  70.         }
  72.         return false;
  73.     }
  74. }