src/EventSubscriber/ItemEditableEventSubscriber.php line 46

  1. <?php
  3. declare(strict_types=1);
  5. namespace App\EventSubscriber;
  7. use ApiPlatform\Core\EventListener\EventPriorities;
  8. use App\Entity\Item;
  9. use App\Entity\User;
  10. use App\Enum\RoleEnum;
  11. use App\Exception\ItemEditableException;
  12. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  13. use Symfony\Component\HttpFoundation\Request;
  14. use Symfony\Component\HttpKernel\Event\ViewEvent;
  15. use Symfony\Component\HttpKernel\KernelEvents;
  16. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  18. final class ItemEditableEventSubscriber implements EventSubscriberInterface
  19. {
  20.     private array $allowedEditableRoles = [
  21.         RoleEnum::PROJECT_MANAGER,
  22.         RoleEnum::PROJECT_EMPLOYEE,
  23.         RoleEnum::EXTERNAL_PARTNER
  24.     ];
  26.     private array $allowedEditableMethods = [
  27.         Request::METHOD_POST,
  28.         Request::METHOD_PUT,
  29.         Request::METHOD_DELETE
  30.     ];
  32.     public function __construct(private readonly TokenStorageInterface $tokenStorage)
  33.     {
  34.     }
  36.     public static function getSubscribedEvents(): array
  37.     {
  38.         return [
  39.             KernelEvents::VIEW => ['isEditableDependOnRole', EventPriorities::PRE_WRITE]
  40.         ];
  41.     }
  43.     /**
  44.      * @throws ItemEditableException
  45.      */
  46.     public function isEditableDependOnRole(ViewEvent $event): void
  47.     {
  48.         $entity = $event->getControllerResult();
  50.         if (
  51.             !$entity instanceof Item
  52.             ||
  53.             !in_array($event->getRequest()->getMethod(), $this->allowedEditableMethods)
  54.         ) {
  55.             return;
  56.         }
  58.         /** @var User $user */
  59.         $user = $this->tokenStorage->getToken()->getUser();
  61.         if (!$user->getCurrentRole()) {
  62.             throw ItemEditableException::forUserDoesNotHaveCurrentRole();
  63.         }
  65.         if (!in_array($user->getCurrentRole()->getKeyName(), $this->allowedEditableRoles)) {
  66.             throw ItemEditableException::forUserDoesNotHavePermission();
  67.         }
  68.     }
  69. }