Feat: Implement contract generation and up-/downloading

This commit is contained in:
Björn Fromme
2023-10-11 17:47:06 +02:00
parent 7ecacd7c78
commit f0911f57aa
13 changed files with 421 additions and 10 deletions
+3 -6
View File
@@ -4,7 +4,6 @@ namespace App\Security\Voter;
use App\Entity\Disposition;
use App\Entity\User;
use App\Repository\ApplicationRepository;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
@@ -13,9 +12,7 @@ class DispositionVoter extends Voter
public const VIEW = 'VIEW';
public const EDIT = 'EDIT';
public const DELETE = 'DELETE';
public function __construct(private readonly ApplicationRepository $applicationRepository)
{}
public const CONTRACT = 'CONTRACT';
protected function supports(string $attribute, mixed $subject): bool
{
@@ -23,7 +20,7 @@ class DispositionVoter extends Voter
return false;
}
return in_array($attribute, [static::VIEW, static::EDIT, static::DELETE]);
return in_array($attribute, [static::VIEW, static::EDIT, static::DELETE, static::CONTRACT]);
}
protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
@@ -34,7 +31,7 @@ class DispositionVoter extends Voter
}
// Teamers may only view or edit their own dispositions
if (in_array('ROLE_TEAMER', $token->getRoleNames()) && in_array($attribute, [static::VIEW, static::EDIT])) {
if (in_array('ROLE_TEAMER', $token->getRoleNames()) && in_array($attribute, [static::VIEW, static::EDIT, static::CONTRACT])) {
/** @var User $user */
$user = $token->getUser();
$teamer = $user->getTeamer();