<?php
// src/Security/Voter/VenueVoter.php
namespace App\Security\Voter;
use Menke\UserBundle\Entity\User;
use App\Entity\Venue;
use App\Repository\VenueProviderRepository;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
class VenueVoter extends Voter
{
public const VIEW = 'VENUE_VIEW';
private $venueRepo;
public function __construct(VenueProviderRepository $venueRepo)
{
$this->venueRepo = $venueRepo;
}
protected function supports($attribute, $subject): bool
{
return $attribute === self::VIEW && $subject instanceof Venue;
}
protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
{
$user = $token->getUser();
if (!$user instanceof User) return false;
if (\in_array('ROLE_ADMIN', $user->getRoles(), true)) {
return true;
}
$provider = $user->getProvider();
if (!$provider) return false;
/** @var Venue $venue */
$venue = $subject;
return $this->venueRepo->existsFor($venue->getId(), $provider->getId());
}
}