EP/myep-team
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

WIP: Implement voter

Browse Source
This commit is contained in:
Björn Fromme
2023-10-11 16:11:48 +02:00
parent 79e4fe0f33
commit 088c5546e7
2 changed files with 27 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Security/Voter/ApplicationVoter.php
+10 -5
View File
@@ -31,18 +31,23 @@ class ApplicationVoter extends Voter
/** @var Application $application */
$application = $subject;
if ($user->hasRole('ROLE_TEAMER')) {
return match ($attribute) {
static::DELETE => $user->getTeamer() === $application->getTeamer() && Application::STATUS_REJECTED === $application->getStatus(),
static::VIEW => $user->getTeamer() === $application->getTeamer() && Application::STATUS_REJECTED !== $application->getStatus(),
default => false,
};
}
if ($user->hasRole('ROLE_ADMINISTRATIVE')) {
return match ($attribute) {
static::VIEW, static::DELETE => true,
static::VIEW => true,
static::DELETE => Application::STATUS_REJECTED === $application->getStatus(),
static::DISPOSE, static::REJECT => Application::STATUS_REJECTED !== $application->getStatus(),
default => false,
};
}
if (static::VIEW === $attribute && $user->hasRole('ROLE_TEAMER')) {
return $user->getTeamer() === $application->getTeamer();
}
return false;
}
}
templates/teamer/application/index.html.twig
+17 -3
View File
@@ -62,9 +62,23 @@
</td>
<td>
<div class="flex items-center space-x-1 justify-end">
<a href="{{ path('app_teamer_assignment', { 'uuid': assignment.uuid, 'r': return_url() }) }}">
{{ icon('info', 'w-5 h-5') }}
</a>
{% if is_granted('VIEW', application) %}
<a href="{{ path('app_teamer_assignment', { 'uuid': assignment.uuid, 'r': return_url() }) }}">
{{ icon('info', 'w-5 h-5') }}
</a>
{% endif %}
{% if is_granted('DELETE', application) %}
<button type="button"
title="Bewerbung löschen"
{{ stimulus_controller('modal-button', [], [], {'confirmation-modal': '#confirmation-modal'}) }}
{{ stimulus_action('modal-button', 'confirmation', null, {
'title': 'Bist du sicher?',
'content': 'Möchtest du die Bewerbing wirklich zurückziehen/löschen?',
'target-url': path('app_teamer_application_delete', { 'uuid': application.uuid })
}) }}>
{{ icon('delete', 'w-5 h-5 text-red-500') }}
</button>
{% endif %}
</div>
</td>
</tr>