82 lines
2.5 KiB
PHP
82 lines
2.5 KiB
PHP
<?php
|
|
|
|
namespace App\Security\Voter;
|
|
|
|
use App\Entity\Application;
|
|
use App\Entity\Assignment;
|
|
use App\Entity\Disposition;
|
|
use App\Entity\User;
|
|
use Doctrine\ORM\EntityManagerInterface;
|
|
use Symfony\Bundle\SecurityBundle\Security;
|
|
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
|
|
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
|
|
|
|
class AssignmentVoter extends Voter
|
|
{
|
|
public const VIEW = 'VIEW';
|
|
public const EDIT = 'EDIT';
|
|
public const APPLY = 'APPLY';
|
|
|
|
public function __construct(
|
|
private readonly Security $security,
|
|
private readonly EntityManagerInterface $entityManager
|
|
) {
|
|
}
|
|
|
|
protected function supports(string $attribute, mixed $subject): bool
|
|
{
|
|
if (!$subject instanceof Assignment) {
|
|
return false;
|
|
}
|
|
|
|
return in_array($attribute, [static::VIEW, static::EDIT, static::APPLY]);
|
|
}
|
|
|
|
protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
|
|
{
|
|
/** @var Assignment $assignment */
|
|
$assignment = $subject;
|
|
|
|
// All authenticated users may view assignments
|
|
if (static::VIEW === $attribute && null !== $token->getUser()) {
|
|
return true;
|
|
}
|
|
|
|
// Only users with administrative role may edit assignments
|
|
if (static::EDIT === $attribute) {
|
|
return $this->security->isGranted('ROLE_ADMINISTRATIVE');
|
|
}
|
|
|
|
// Only allow applications to published assignments
|
|
if (Assignment::STATUS_DRAFT === $assignment->getStatus()) {
|
|
return false;
|
|
}
|
|
|
|
// Only allow applications on empty slots
|
|
$availableSlots = (int) $assignment->getAvailableDispositions();
|
|
if (0 < $availableSlots) {
|
|
$dispositions = $this
|
|
->entityManager
|
|
->getRepository(Disposition::class)
|
|
->findCurrentDispositionsByAssignment($assignment)
|
|
;
|
|
|
|
return count($dispositions) < $availableSlots;
|
|
}
|
|
|
|
// Only teamers without existing applications may apply to the assignment
|
|
if ($this->security->isGranted('ROLE_TEAMER')) {
|
|
/** @var User $user */
|
|
$user = $token->getUser();
|
|
$teamer = $user->getTeamer();
|
|
$application = $this
|
|
->entityManager
|
|
->getRepository(Application::class)
|
|
->findOneBy(['teamer' => $teamer, 'assignment' => $assignment]);
|
|
|
|
return null === $application;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
} |