src/Security/Voter/ContractManagerVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\User;
  6. use Doctrine\ORM\EntityManagerInterface;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  10. class ContractManagerVoter extends Voter
  11. {
  12. public const VIEW_CONTRACTS = 'VIEW_CONTRACTS';
  14. private EntityManagerInterface $entityManager;
  16. public function __construct(EntityManagerInterface $entityManager)
  17. {
  18. $this->entityManager = $entityManager;
  19. }
  21. protected function supports(string $attribute, mixed $subject): bool
  22. {
  23. return $attribute === self::VIEW_CONTRACTS;
  24. }
  26. protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
  27. {
  28. $user = $token->getUser();
  30. if (!$user instanceof User) {
  31. return false;
  32. }
  34. // Si tiene alguno de estos roles, puede ver contratos
  35. $roles = $user->getRoles();
  36. if (in_array('ROLE_ADMIN', $roles) ||
  37. in_array('ROLE_LEGAL', $roles) ||
  38. in_array('ROLE_CONTRACTS_VIEWER', $roles) ||
  39. in_array('ROLE_FINANCES', $roles)) {
  40. return true;
  41. }
  43. // Verificar si es gestor de algún contrato
  44. return $this->isContractManager($user);
  45. }
  47. private function isContractManager(User $user): bool
  48. {
  49. $qb = $this->entityManager->createQueryBuilder();
  50. $count = $qb
  51. ->select('COUNT(sc.id)')
  52. ->from('App\Entity\SupplierContract', 'sc')
  53. ->leftJoin('sc.managers', 'm')
  54. ->leftJoin('sc.administrativeManagers', 'am')
  55. ->where('m.id = :userId OR am.id = :userId')
  56. ->setParameter('userId', $user->getId())
  57. ->getQuery()
  58. ->getSingleScalarResult();
  60. return $count > 0;
  61. }
  62. }