Merge pull request #5180 from christianbeeznest/social-groups
Social: Improve group management and add image upload featurepull/5189/head
christianbeeznest
2 years ago
committed by
GitHub
commit
9b0e6fc6df
@ -0,0 +1,73 @@ |
|||||||
|
<?php |
||||||
|
|
||||||
|
/* For licensing terms, see /license.txt */ |
||||||
|
|
||||||
|
declare(strict_types=1); |
||||||
|
|
||||||
|
namespace Chamilo\CoreBundle\Security\Authorization\Voter; |
||||||
|
|
||||||
|
use Chamilo\CoreBundle\Entity\Usergroup; |
||||||
|
use Chamilo\CoreBundle\Repository\Node\UsergroupRepository; |
||||||
|
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface; |
||||||
|
use Symfony\Component\Security\Core\Authorization\Voter\Voter; |
||||||
|
use Symfony\Component\Security\Core\Security; |
||||||
|
use Symfony\Component\Security\Core\User\UserInterface; |
||||||
|
|
||||||
|
class UsergroupVoter extends Voter |
||||||
|
{ |
||||||
|
public const CREATE = 'CREATE'; |
||||||
|
public const VIEW = 'VIEW'; |
||||||
|
public const EDIT = 'EDIT'; |
||||||
|
public const DELETE = 'DELETE'; |
||||||
|
|
||||||
|
public function __construct( |
||||||
|
private Security $security, |
||||||
|
private UsergroupRepository $usergroupRepository |
||||||
|
) {} |
||||||
|
|
||||||
|
protected function supports(string $attribute, $subject): bool |
||||||
|
{ |
||||||
|
$options = [ |
||||||
|
self::CREATE, |
||||||
|
self::VIEW, |
||||||
|
self::EDIT, |
||||||
|
self::DELETE, |
||||||
|
]; |
||||||
|
|
||||||
|
// if the attribute isn't one we support, return false |
||||||
|
if (!\in_array($attribute, $options, true)) { |
||||||
|
return false; |
||||||
|
} |
||||||
|
|
||||||
|
// only vote on Post objects inside this voter |
||||||
|
return $subject instanceof Usergroup; |
||||||
|
} |
||||||
|
|
||||||
|
|
||||||
|
protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool |
||||||
|
{ |
||||||
|
$currentUser = $token->getUser(); |
||||||
|
if (!$currentUser instanceof UserInterface) { |
||||||
|
return false; |
||||||
|
} |
||||||
|
|
||||||
|
if ($this->security->isGranted('ROLE_ADMIN')) { |
||||||
|
return true; |
||||||
|
} |
||||||
|
|
||||||
|
/** @var Usergroup $usergroup */ |
||||||
|
$usergroup = $subject; |
||||||
|
|
||||||
|
switch ($attribute) { |
||||||
|
case self::EDIT: |
||||||
|
return $this->canEdit($usergroup, $currentUser); |
||||||
|
} |
||||||
|
|
||||||
|
return false; |
||||||
|
} |
||||||
|
|
||||||
|
private function canEdit(Usergroup $usergroup, $currentUser): bool |
||||||
|
{ |
||||||
|
return $this->usergroupRepository->isGroupModerator($usergroup->getId(), $currentUser->getId()); |
||||||
|
} |
||||||
|
} |
||||||
Loading…
Reference in new issue