src/Security/UserPermissionsListener.php line 56

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use App\Entity\User;
  6. use App\Utils\UserPermissionsHelper;
  7. use Doctrine\ORM\EntityManagerInterface;
  8. use Symfony\Component\HttpFoundation\RedirectResponse;
  9. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  10. use Symfony\Component\HttpKernel\Event\KernelEvent;
  11. use Symfony\Component\Routing\RouterInterface;
  12. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  15. class UserPermissionsListener
  16. {
  17.     /**
  18.      * @var SessionInterface
  19.      */
  20.     private $session;
  21.     /**
  22.      * @var EntityManagerInterface
  23.      */
  24.     private $em;
  25.     /**
  26.      * @var UserPermissionsHelper
  27.      */
  28.     private $userPermissionsHelper;
  29.     /**
  30.      * @var TokenStorageInterface
  31.      */
  32.     private $tokenStorage;
  33.     /**
  34.      * @var RouterInterface
  35.      */
  36.     private $router;
  38.     private $userPermissionsRoutes;
  40.     public function __construct(
  41.         SessionInterface $session,
  42.         EntityManagerInterface $em,
  43.         UserPermissionsHelper $userPermissionsHelper,
  44.         TokenStorageInterface $tokenStorage,
  45.         RouterInterface $router,
  46.         $userPermissionsRoutes
  47.     ) {
  48.         $this->session = $session;
  49.         $this->em = $em;
  50.         $this->userPermissionsHelper = $userPermissionsHelper;
  51.         $this->tokenStorage = $tokenStorage;
  52.         $this->router = $router;
  53.         $this->userPermissionsRoutes = $userPermissionsRoutes;
  54.     }
  56.     public function preExecute(KernelEvent $event)
  57.     {
  58.         $currentRoute = $event->getRequest()->get('_route');
  59.         $protectedRoutes = $this->userPermissionsRoutes;
  62.         $permissionNeeded = null;
  63.         foreach ($protectedRoutes as $protectedRoute) {
  64.             foreach ($protectedRoute as $key => $v) {
  65.                 if(in_array($currentRoute, $v['urls'])) {
  66.                     $permissionNeeded = $key;
  67.                 }
  68.             }
  69.         }
  70.         if (empty($permissionNeeded)) {
  71.             return true;
  72.         }
  74.         /** @var User $user */
  75.         $vbxUser = $this->tokenStorage->getToken()->getUser()->getId();
  76.         $hasPermission = $this->userPermissionsHelper->userHasPermission($vbxUser, $permissionNeeded);
  78.         if (!$hasPermission) {
  79.             switch ($event->getRequest()->getRealMethod()) {
  80.                 case "GET":
  81.                     $this->session->getFlashBag()->add('danger', "Oops! You don't have the User permissions needed to access this. Please contact your manager to update.");
  82.                     $event->setController(function () {
  83.                         return new RedirectResponse($this->router->generate('app_rapoarte_management'));
  84.                     });
  85.                     break;
  86. //                case "POST":
  87. //                    $event->setController(function () {
  88. //                        return new JsonResponse(["error" => true, "message" => "Oops! You are not allowed to perform this action. Please contact your manager to update"]);
  89. //                    });
  90. //                    break;
  91. //                default:
  92. //                    $event->setController(function () {
  93. //                        throw new UnauthorizedHttpException("You are not allowed to access this section.");
  94. //                    });
  95. //                    break;
  96.             }
  97.         }
  99.         return true;
  100.     }
  101. }