src/Platform/SecurityBundle/Security/AliasVoter.php line 13

Open in your IDE?
  1. <?php
  3. namespace Platform\SecurityBundle\Security;
  5. use Platform\SecurityBundle\Service\Sentry;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  10. /**
  11.  * AliasVoter votes based on the permissions array extracted from the alias.
  12.  */
  13. class AliasVoter implements VoterInterface
  14. {
  15.     /**
  16.      * @var AuthorizationCheckerInterface
  17.      */
  18.     private AuthorizationCheckerInterface $authorizationChecker;
  20.     /**
  21.      * @var Sentry
  22.      */
  23.     private Sentry $sentry;
  25.     /**
  26.      * @param AuthorizationCheckerInterface $authorizationChecker
  27.      * @param Sentry $sentry
  28.      */
  29.     public function __construct(
  30.         AuthorizationCheckerInterface $authorizationChecker,
  31.         Sentry $sentry
  32.     ) {
  33.         $this->authorizationChecker = $authorizationChecker;
  34.         $this->sentry = $sentry;
  35.     }
  37.     /**
  38.      * {@inheritdoc}
  39.      */
  40.     public function vote(TokenInterface $token, $subject, array $attributes): int
  41.     {
  42.         foreach ($attributes as $attribute) {
  43.             // skip non aliases
  44.             if ( ! $this->sentry->isAlias($attribute)) {
  45.                 continue;
  46.             }
  48.             foreach ($this->sentry->prepareAttributes([$attribute]) as $aliasAttribute) {
  49.                 // there should be no aliases at this stage, if there are, skip them
  50.                 if ($this->sentry->isAlias($aliasAttribute)) {
  51.                     continue;
  52.                 }
  54.                 if ($this->authorizationChecker->isGranted($aliasAttribute, $subject)) {
  55.                     return VoterInterface::ACCESS_GRANTED;
  56.                 }
  57.             }
  58.         }
  60.         return VoterInterface::ACCESS_ABSTAIN;
  61.     }
  62. }