src/Security/Voter/UserVoter.php line 18

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Controller\Api\V1\Song\SearchFromMmdz;
  6. use App\Entity\Profile\Profile;
  7. use App\Enums\Constants;
  8. use App\Repository\Profile\ProfileRepository;
  9. use App\Service\AuthenticationService;
  10. use App\Service\GeneralService;
  11. use App\Service\ProfileService;
  12. use FontLib\Table\Type\nameRecord;
  13. use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;
  14. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  15. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  16. use Symfony\Component\Security\Core\User\UserInterface;
  18. class UserVoter extends Voter
  19. {
  20.     private const SERVICE_ADMIN_ACCESS = 'SERVICE_ADMIN_ACCESS';
  21.     private const SONGWRITER_USER_CAN_CREATE_SONG = 'SONGWRITER_USER_CAN_CREATE_SONG';
  23.     /** @var GeneralService */
  24.     private $generalService;
  26.     /**
  27.      * @var AuthenticationService
  28.      */
  29.     private $authenticationService;
  31.     /**
  32.      * @var ProfileService
  33.      */
  34.     private $profileService;
  36.     /** @var ProfileRepository */
  37.     private $profileRepository;
  39.     public function __construct(
  40.         GeneralService $generalService,
  41.         AuthenticationService $authenticationService,
  42.         ProfileService $profileService,
  43.         ProfileRepository $profileRepository
  44.     )
  45.     {
  46.         $this->generalService = $generalService;
  47.         $this->authenticationService = $authenticationService;
  48.         $this->profileService = $profileService;
  49.         $this->profileRepository = $profileRepository;
  50.     }
  52.     protected function supports($attribute, $subject)
  53.     {
  54.         return in_array($attribute, [self::SERVICE_ADMIN_ACCESS, self::SONGWRITER_USER_CAN_CREATE_SONG]);
  55.     }
  57.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  58.     {
  59.         $user = $token->getUser();
  60.         // if the user is anonymous, do not grant access
  61.         if (!$user instanceof UserInterface) {
  62.             return false;
  63.         }
  65.         // ... (check conditions and return true to grant permission) ...
  66.         switch ($attribute) {
  67.             case self::SERVICE_ADMIN_ACCESS:
  68.                 return $this->authenticationService->userIsMmpzServiceAdmin();
  70.             case self::SONGWRITER_USER_CAN_CREATE_SONG:
  71.                 /** @var Profile $profile */
  72.                 $profile = $this->generalService->findProfileForProcess(
  73.                     $this->generalService->findProfileTypeByName(Constants::PROFILE_TYPE_SONGWRITER),
  74.                     $this->generalService->findTheCurrentUser()
  75.                 );
  77.                 $profileHasInactiveSubscription = !($_ENV['CWR_ENVIROMENT'] === 'local') && $this->profileService->profielHasInactivePacakgeSubcription($profile);
  78.                 if($profileHasInactiveSubscription){
  79.                     throw new BadRequestHttpException("The status of your subscription is currently Inactive. This means we have not yet received payment and you will not be able to upload any songs. Please contact publishing@horusmusic.global to discuss this and request an invoice to make a direct payment.");
  80.                 }
  82.                 $canSongwriterAddOtherComposition = ($_ENV['CWR_ENVIROMENT'] === 'local') || $this->profileService->canSongwriterAddOtherComposition();
  83.                 if(!$canSongwriterAddOtherComposition){
  84.                     throw new BadRequestHttpException("Please check the package or Subscription composition limit");
  85.                 }
  86.                 $canCreateSong = ($_ENV['CWR_ENVIROMENT'] === 'local') || $this->profileService->userIsSongwriterCanCreateSong();
  87.                 return ($canSongwriterAddOtherComposition && $canCreateSong && !$profileHasInactiveSubscription);
  88.         }
  90.         return false;
  91.     }
  92. }