src/Security/Voter/SuperAdminVoter.php line 12

  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\User ;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. // use Symfony\Component\Security\Core\Security;
  8. use Symfony\Bundle\SecurityBundle\Security;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. use Psr\Log\LoggerInterface;
  12. class SuperAdminVoter extends Voter
  13. {
  14.     const SUPER_ADMIN_ROLE = "ROLE_SUPER_ADMIN";
  15.     private $logger;
  17.     public function __construct(Security $security, LoggerInterface $logger)
  18.     {
  19.         $this->logger = $logger;
  20.         $this->security = $security;
  21.     }
  23.     protected function supports($attribute, $subject):bool
  24.     {
  26.         // if the attribute isn't one we support, return false
  27.         if ($this->security->getUser() == null || !in_array(self::SUPER_ADMIN_ROLE, $this->security->getUser()->getRoles())) {
  28.             return false;
  29.         }
  31.         return true;
  32.     }
  34.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token):bool
  35.     {
  36.         $user = $token->getUser();
  37.         $this->logger->debug('user voter voteOnAttribute: '.$user->getUserIdentifier());
  39.         if (!$user instanceof User) {
  40.             // the user must be logged in; if not, deny access
  41.             return false;
  42.         }
  43.         return $this->security->isGranted(self::SUPER_ADMIN_ROLE);
  44.         // id has user 
  46.         // throw new \LogicException('This code should not be reached!');
  47.     }
  48. }