vendor/lolautruche/ez-core-extra-bundle/Security/Voter/SimplifiedCoreVoter.php line 20

Open in your IDE?
  1. <?php
  3. /*
  4. * This file is part of the EzCoreExtraBundle package.
  5. *
  6. * (c) Jérôme Vieilledent <jerome@vieilledent.fr>
  7. *
  8. * For the full copyright and license information, please view the LICENSE
  9. * file that was distributed with this source code.
  10. */
  12. namespace Lolautruche\EzCoreExtraBundle\Security\Voter;
  14. use Ibexa\Contracts\Core\Repository\Exceptions\InvalidArgumentException;
  15. use Ibexa\Contracts\Core\Repository\Values\ValueObject;
  16. use Ibexa\Core\MVC\Symfony\Security\Authorization\Attribute as AuthorizationAttribute;
  17. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  18. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  20. class SimplifiedCoreVoter implements VoterInterface
  21. {
  22. const IBEXA_ROLE_PREFIX = 'ibexa:';
  24. /**
  25. * @var VoterInterface
  26. */
  27. private $coreVoter;
  29. /**
  30. * @var VoterInterface
  31. */
  32. private $valueObjectVoter;
  34. public function __construct(VoterInterface $coreVoter, VoterInterface $valueObjectVoter)
  35. {
  36. $this->coreVoter = $coreVoter;
  37. $this->valueObjectVoter = $valueObjectVoter;
  38. }
  40. public function supportsAttribute($attribute)
  41. {
  42. return is_string($attribute) && stripos($attribute, static::IBEXA_ROLE_PREFIX) === 0;
  43. }
  45. public function supportsClass($class)
  46. {
  47. return true;
  48. }
  50. public function vote(TokenInterface $token, $object, array $attributes)
  51. {
  52. foreach ($attributes as $attribute) {
  53. if (!$this->supportsAttribute($attribute)) {
  54. continue;
  55. }
  57. $attribute = substr($attribute, strlen(static::IBEXA_ROLE_PREFIX));
  58. list($module, $function) = explode(':', $attribute);
  59. $attributeObject = new AuthorizationAttribute($module, $function);
  60. try {
  61. if ($object instanceof ValueObject) {
  62. $attributeObject->limitations = ['valueObject' => $object];
  63. return $this->valueObjectVoter->vote($token, $object, [$attributeObject]);
  64. } else {
  65. return $this->coreVoter->vote($token, $object, [$attributeObject]);
  66. }
  67. } catch (InvalidArgumentException $e) {
  68. continue;
  69. }
  70. }
  72. return static::ACCESS_ABSTAIN;
  73. }
  74. }