src/Common/Security/Voter/MemberApplicationVoter.php line 18

Open in your IDE?
  1. <?php
  3. namespace PaperKite\Common\Security\Voter;
  5. use Lightbulb\Symfony\Exception\NotFoundException;
  6. use PaperKite\Common\Entity\CommonUserInterface;
  7. use PaperKite\Common\Entity\Enum\MemberApplicationProcessingStatusEnumType;
  8. use PaperKite\Common\Entity\Member\MemberApplication;
  9. use PaperKite\Common\Service\Member\MemberApplicationReaderService;
  10. use PaperKite\CompanyApi\Entity\CompanyUserInterface;
  11. use PaperKite\EmployeeApi\Entity\EmployeeInterface;
  12. use PaperKite\HealthMutualApi\Entity\HealthMutualUserInterface;
  13. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  14. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  15. use Symfony\Component\Security\Core\Security;
  16. use Symfony\Component\Security\Core\User\UserInterface;
  18. class MemberApplicationVoter extends Voter
  19. {
  20.     public const LIST = 'MEMBER_APPLICATION_LIST';
  22.     public const VIEW = 'MEMBER_APPLICATION_VIEW';
  24.     public const EDIT = 'MEMBER_APPLICATION_EDIT';
  26.     public const LITE_VIEW = 'MEMBER_APPLICATION_LITE_VIEW';
  28.     public const COMPANY_EDIT = 'MEMBER_APPLICATION_COMPANY_EDIT';
  30.     public const HEALTH_MUTUAL_EDIT = 'MEMBER_APPLICATION_HEALTH_MUTUAL_EDIT';
  32.     public function __construct(
  33.         private Security $security,
  34.         private MemberApplicationReaderService $memberApplicationReaderService,
  35.     ) {
  36.     }
  38.     protected function supports(string $attribute, $subject): bool
  39.     {
  40.         // https://symfony.com/doc/current/security/voters.html
  41.         return in_array(
  42.             $attribute,
  43.             [
  44.                 self::VIEW,
  45.                 self::EDIT,
  46.                 self::LITE_VIEW,
  47.                 self::COMPANY_EDIT,
  48.                 self::HEALTH_MUTUAL_EDIT,
  49.             ]
  50.         );
  51.     }
  53.     /**
  54.      * @param string $subject Member application identifier
  55.      *
  56.      * @throws NotFoundException
  57.      */
  58.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  59.     {
  60.         /** @var CommonUserInterface $user */
  61.         $user = $token->getUser();
  62.         // if the user is anonymous, do not grant access
  63.         if (!$user instanceof UserInterface) {
  64.             return false;
  65.         }
  67.         if ($this->security->isGranted('ROLE_SUPER_ADMIN')) {
  68.             return true;
  69.         }
  71.         $memberApplication = $this->memberApplicationReaderService->getById($subject);
  73.         return match ($attribute) {
  74.             self::VIEW => $this->viewCheck($user),
  75.             self::EDIT => $this->editCheck($user, $memberApplication),
  76.             self::LITE_VIEW => $this->liteViewCheck($user, $memberApplication),
  77.             self::COMPANY_EDIT => $this->companyEditCheck($user, $memberApplication),
  78.             self::HEALTH_MUTUAL_EDIT => $this->healthMutualEditCheck($user, $memberApplication),
  79.             default => false,
  80.         };
  81.     }
  83.     private function viewCheck(CommonUserInterface $user): bool
  84.     {
  85.         if ($user instanceof EmployeeInterface) {
  86.             return true;
  87.         }
  89.         return false;
  90.     }
  92.     private function editCheck(CommonUserInterface $user, MemberApplication $memberApplication): bool
  93.     {
  94.         if ($user instanceof EmployeeInterface) {
  95.             // No edition of closed/exported member application
  96.             if (true === in_array($memberApplication->getProcessingStatus(), [
  97.                 MemberApplicationProcessingStatusEnumType::STATUS_TO_BE_EXPORTED,
  98.                 MemberApplicationProcessingStatusEnumType::STATUS_CLOSED,
  99.             ], true)) {
  100.                 return false;
  101.             }
  103.             return true;
  104.         }
  106.         return false;
  107.     }
  109.     private function liteViewCheck(CommonUserInterface $user, MemberApplication $memberApplication): bool
  110.     {
  111.         if ($user instanceof HealthMutualUserInterface) {
  112.             if ($memberApplication->getHealthMutual() === $user->getHealthMutual()) {
  113.                 return true;
  114.             }
  115.         }
  117.         if ($user instanceof CompanyUserInterface) {
  118.             if ($memberApplication->getCompany() === $user->getCompany()) {
  119.                 return true;
  120.             }
  121.         }
  123.         return false;
  124.     }
  126.     private function companyEditCheck(CommonUserInterface $user, MemberApplication $memberApplication): bool
  127.     {
  128.         if ($user instanceof CompanyUserInterface) {
  129.             if ($memberApplication->getCompany() === $user->getCompany()) {
  130.                 return true;
  131.             }
  132.         }
  134.         return false;
  135.     }
  137.     private function healthMutualEditCheck(CommonUserInterface $user, MemberApplication $memberApplication): bool
  138.     {
  139.         if ($user instanceof HealthMutualUserInterface) {
  140.             if ($memberApplication->getHealthMutual() === $user->getHealthMutual()) {
  141.                 return true;
  142.             }
  143.         }
  145.         return false;
  146.     }
  147. }