src/Security/Voter/JobOfferVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\JobOffer;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  8. use Symfony\Component\Security\Core\Security;
  9. use Symfony\Component\Security\Core\User\UserInterface;
  11. class JobOfferVoter extends Voter
  12. {
  13.     public const EDIT = 'OFFER_EDIT';
  14.     public const VIEW = 'OFFER_VIEW';
  15.     public const CAN_SEE_CANDIDACIES = 'CAN_SEE_CANDIDACIES';
  17.     public function __construct(private Security $security)
  18.     {
  19.     }
  21.     protected function supports(string $attribute, mixed $subject): bool
  22.     {
  23.         // replace with your own logic
  24.         // https://symfony.com/doc/current/security/voters.html
  25.         return in_array($attribute, [
  26.                 self::EDIT,
  27.                 self::VIEW,
  28.                 self::CAN_SEE_CANDIDACIES,
  29.             ])
  30.             && $subject instanceof \App\Entity\JobOffer;
  31.     }
  33.     protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
  34.     {
  35.         $user = $token->getUser();
  37.         if (!$user instanceof UserInterface) {
  38.             return false;
  39.         }
  41.         if($this->security->isGranted('ROLE_MANAGER')) {
  42.             return true;
  43.         }
  44.         // ... (check conditions and return true to grant permission) ...
  45.         switch ($attribute) {
  46.             case self::EDIT:
  47.                 return $this->canEdit($subject, $user);
  48.             case self::VIEW:
  49.                 return $this->canView();
  50.             case self::CAN_SEE_CANDIDACIES:
  51.                 return $this->canSeeCandidacies($subject, $user);
  52.         }
  53.         return false;
  54.     }
  56.     private function canView(): bool
  57.     {
  58.         return true;
  59.     }
  61.     private function canEdit(JobOffer $jobOffer, UserInterface $user)
  62.     {
  63.         if($jobOffer->getCandidacies()->count() > 0) {
  64.             return false;
  65.         }
  67.         if($jobOffer->getCreatedBy() === $user) {
  68.             return true;
  69.         }
  71.         $userCenters = $user->getCentre();
  73.         return $userCenters->contains($jobOffer->getCenter());
  75.     }
  77.     private function canSeeCandidacies(JobOffer $jobOffer, UserInterface $user): bool
  78.     {
  79.         if($jobOffer->getCreatedBy() === $user) {
  80.             return true;
  81.         }
  83.         $userCenters = $user->getCentre();
  85.         return $userCenters->contains($jobOffer->getCenter());
  87.     }
  89. }