<?php
// src/Security/Voter/VenueVoter.php
namespace App\Security\Voter;
use App\Entity\Venue;
use App\Repository\VenueProviderRepository;
use App\User\Entity\User;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
class VenueVoter extends Voter
{
public const VIEW = 'VENUE_VIEW';
private $venueRepo;
public function __construct(VenueProviderRepository $venueRepo)
{
$this->venueRepo = $venueRepo;
}
protected function supports($attribute, $subject): bool
{
return self::VIEW === $attribute && $subject instanceof Venue;
}
protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
{
$user = $token->getUser();
if (!$user instanceof User) {
return false;
}
if (\in_array('ROLE_ADMIN', $user->getRoles(), true)) {
return true;
}
$provider = $user->getProvider();
if (!$provider) {
return false;
}
/** @var Venue $venue */
$venue = $subject;
return $this->venueRepo->existsFor($venue->getId(), $provider->getId());
}
}