WIP: Implement role house manager and feedback providing

src/Security/Voter/DispositionVoter.php

@@ -2,6 +2,8 @@
 
 namespace App\Security\Voter;
 
+use App\BusProNet\DataProvider\HotelDataProvider;
+use App\BusProNet\Model\Hotel;
 use App\Entity\Disposition;
 use App\Entity\User;
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
@@ -14,6 +16,11 @@ class DispositionVoter extends Voter
     public const DELETE = 'DELETE';
     public const CONTRACT = 'CONTRACT';
     public const INVOICE = 'INVOICE';
+    public const FEEDBACK = 'FEEDBACK';
+
+    public function __construct(private readonly HotelDataProvider $hotelDataProvider)
+    {
+    }
 
     protected function supports(string $attribute, mixed $subject): bool
     {
@@ -26,18 +33,38 @@ class DispositionVoter extends Voter
 
     protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
     {
+        /** @var Disposition $disposition */
+        $disposition = $subject;
+        /** @var User $user */
+        $user = $token->getUser();
+
         // Administrative users have full access to all dispositions
         if (in_array('ROLE_ADMINISTRATIVE', $token->getRoleNames())) {
             return true;
         }
 
+        // House managers may provide feedback for dispositions that are past
+        // and are associated with their hotel
+        if (in_array('ROLE_HOUSE_MANAGER', $token->getRoleNames()) && static::FEEDBACK === $attribute) {
+            $hotels = $this
+                ->hotelDataProvider
+                ->findByCode($user->getHotelCode())
+            ;
+            $hotelBusProIds = array_map(function (Hotel $hotel) {
+                return $hotel->getBusProId();
+            }, $hotels);
+            $destination = $disposition
+                ->getAssignment()
+                ->getDestination()
+            ;
+
+            return in_array($destination->getHotelBusProId(), $hotelBusProIds)
+                && $destination->getDateTo() < new \DateTimeImmutable();
+        }
+
         // Teamers may only view or edit their own dispositions
         if (in_array('ROLE_TEAMER', $token->getRoleNames())) {
-            /** @var User $user */
-            $user = $token->getUser();
             $teamer = $user->getTeamer();
-            /** @var Disposition $disposition */
-            $disposition = $subject;
 
             switch ($attribute) {
                 case static::VIEW: