Symfony Profiler

<?php
namespace Harmonizely\Service\Panel\AccessVoters;
use Harmonizely\Model\Member;
use Harmonizely\Model\Organization;
use Harmonizely\Model\UserInterface;
use Harmonizely\Service\Subscription\Voter\SubscriptionVoter;
class OrganizationVoter extends AbstractVoter
{
/**
* Resource name
*/
const RESOURCE_NAME = 'organization';
/**
* View events
*/
const ORGANIZATION_REPORT_VIEW = 'organization_report_view';
/**
* View organization
*/
const ORGANIZATION_VIEW = 'organization_view';
/**
* Delete organization
*/
const ORGANIZATION_DELETE = 'organization_delete';
/**
* Organization integration
*/
const ORGANIZATION_INTEGRATION = 'organization_integration';
const ORGANIZATION_EDIT = 'organization_edit';
const ORGANIZATION_BILLING = 'organization_billing';
const ORGANIZATION_MANAGE_USER = 'organization_manage_user';
const ORGANIZATION_MANAGE_OWNER = 'organization_manage_owner';
const ORGANIZATION_MANAGE_ROUND_ROBIN = 'organization_manage_round_robin';
const ORGANIZATION_MANAGE_TRANSLATION = 'organization_manage_translation';
const ORGANIZATION_MANAGE_APPEARANCE = 'organization_manage_appearance';
const ORGANIZATION_MANAGE_WIDGET = 'organization_manage_widget';
const ORGANIZATION_LEAVE = 'organization_leave';
const ORGANIZATION_CALENDAR_SETTINGS = 'organization_calendar_settings';
const ORGANIZATION_MANAGE_ROLE = 'organization_manage_role';
const ORGANIZATION_INTERNAL_EVENT_VIEW = 'organization_internal_event_view';
const ORGANIZATION_ALLOW_LOGIN_AS_USER = 'organization_allow_login_as_user';
public static array $organizationRoleActionMock = [
Member::ROLE_OWNER => [
OrganizationVoter::ORGANIZATION_LEAVE => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_VIEW => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_REPORT_VIEW => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_CALENDAR_SETTINGS => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_INTERNAL_EVENT_VIEW => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_ROUND_ROBIN => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_INTEGRATION => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_EDIT => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_USER => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_ROLE => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_TRANSLATION => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_APPEARANCE => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_WIDGET => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_DELETE => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_BILLING => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_OWNER => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_ALLOW_LOGIN_AS_USER => ['fixed' => true, 'enable' => true],
],
Member::ROLE_MANAGER => [
OrganizationVoter::ORGANIZATION_LEAVE => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_VIEW => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_REPORT_VIEW => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_CALENDAR_SETTINGS => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_INTERNAL_EVENT_VIEW => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_ROUND_ROBIN => ['fixed' => false, 'enable' => false],
OrganizationVoter::ORGANIZATION_INTEGRATION => ['fixed' => false, 'enable' => false],
OrganizationVoter::ORGANIZATION_EDIT => ['fixed' => false, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_USER => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_ROLE => ['fixed' => false, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_TRANSLATION => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_APPEARANCE => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_MANAGE_WIDGET => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_DELETE => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_BILLING => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_OWNER => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_ALLOW_LOGIN_AS_USER => ['fixed' => false, 'enable' => false],
],
Member::ROLE_MEMBER => [
OrganizationVoter::ORGANIZATION_LEAVE => ['fixed' => true, 'enable' => true],
OrganizationVoter::ORGANIZATION_VIEW => ['fixed' => false, 'enable' => false],
OrganizationVoter::ORGANIZATION_REPORT_VIEW => ['fixed' => false, 'enable' => false],
OrganizationVoter::ORGANIZATION_CALENDAR_SETTINGS => ['fixed' => false, 'enable' => true],
OrganizationVoter::ORGANIZATION_INTERNAL_EVENT_VIEW => ['fixed' => false, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_ROUND_ROBIN => ['fixed' => false, 'enable' => false],
OrganizationVoter::ORGANIZATION_INTEGRATION => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_EDIT => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_USER => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_ROLE => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_TRANSLATION => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_APPEARANCE => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_WIDGET => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_DELETE => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_BILLING => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_MANAGE_OWNER => ['fixed' => true, 'enable' => false],
OrganizationVoter::ORGANIZATION_ALLOW_LOGIN_AS_USER => ['fixed' => true, 'enable' => false],
],
];
/**
* Return resource name
*
* @return string
*/
function getResourceName(): string
{
return self::RESOURCE_NAME;
}
/**
* Return allowed attributes for current user
*
* @return array|string[]
*/
function getResourceAttributes(): array
{
return [
self::ORGANIZATION_LEAVE,
self::ORGANIZATION_VIEW,
self::ORGANIZATION_REPORT_VIEW,
self::ORGANIZATION_CALENDAR_SETTINGS,
self::ORGANIZATION_INTERNAL_EVENT_VIEW,
self::ORGANIZATION_MANAGE_ROUND_ROBIN,
self::ORGANIZATION_INTEGRATION,
self::ORGANIZATION_EDIT,
self::ORGANIZATION_MANAGE_USER,
self::ORGANIZATION_MANAGE_ROLE,
self::ORGANIZATION_MANAGE_TRANSLATION,
self::ORGANIZATION_MANAGE_APPEARANCE,
self::ORGANIZATION_MANAGE_WIDGET,
self::ORGANIZATION_DELETE,
self::ORGANIZATION_BILLING,
self::ORGANIZATION_MANAGE_OWNER,
self::ORGANIZATION_ALLOW_LOGIN_AS_USER,
];
}
/**
* Return allowed attributes for current user
*
* @param UserInterface $user
* @param mixed $subject
* @return array|string[]
*/
function getAllowedAttributes(UserInterface $user, $subject): array
{
$allowedAttributes = [];
$organization = $user->getDefaultOrganization();
if ($organization instanceof Organization && (!$subject or $subject === $organization)) {
if (SubscriptionVoter::staticVoteOnAttribute(SubscriptionVoter::ORGANIZATION, $user)) {
$member = $user->getMember();
if ($member) {
foreach ($organization->getRoles() as $roleEntity) {
if ($roleEntity->getName() === $member->getRole()) {
foreach ($roleEntity->getPermissions() as $permission) {
if ($permission->isEnable()) {
$allowedAttributes[] = $permission->getPermission()->getAction();
}
}
}
}
}
} else {
if ($organization->isOrganizationOwner($user)) {
$allowedAttributes = [
self::ORGANIZATION_VIEW,
self::ORGANIZATION_BILLING,
self::ORGANIZATION_MANAGE_USER,
self::ORGANIZATION_MANAGE_OWNER,
self::ORGANIZATION_CALENDAR_SETTINGS,
];
}
}
if ($user->isOnlySsoUser()) {
$allowedAttributes = array_diff($allowedAttributes, [self::ORGANIZATION_LEAVE]);
}
}
return $allowedAttributes;
}
/**
* Determines if the attribute and subject are supported by this voter.
*
* @param string $attribute An attribute
* @param mixed $subject The subject to secure, e.g. an object the user wants to access or any other PHP type
*
* @return bool True if the attribute and subject are supported, false otherwise
*/
protected function supports($attribute, $subject): bool
{
if ($subject !== null && !($subject instanceof Organization)) {
return false;
}
if (!in_array($attribute, $this->getResourceAttributes())) {
return false;
}
return true;
}
/**
* @param string $attribute
* @param UserInterface $user
* @return bool
*/
public static function staticVoteOnAttribute(string $attribute, UserInterface $user): bool
{
$instance = new self();
if (!in_array($attribute, $instance->getResourceAttributes())) {
return false;
}
return in_array($attribute, $instance->getAllowedAttributes($user, null));
}
}

src/Service/Panel/AccessVoters/OrganizationVoter.php line 9