src/EventSubscriber/Task/TaskPreSerializerSubscriber.php line 71

Open in your IDE?
  1. <?php
  2. /**
  3.  * Created by PhpStorm.
  4.  * User: SUSAN MEDINA
  5.  * Date: 13/06/2019
  6.  * Time: 03:09 PM
  7.  */
  9. namespace App\EventSubscriber\Task;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  12. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  13. use Symfony\Component\HttpKernel\Event\ViewEvent;
  14. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  15. use Symfony\Component\HttpFoundation\Request;
  16. use Symfony\Component\HttpKernel\KernelEvents;
  17. use Symfony\Contracts\Translation\TranslatorInterface;
  18. use App\Exception\NotFoundException;
  19. use App\Exception\AccessDeniedException;
  20. use ApiPlatform\Core\EventListener\EventPriorities;
  21. use App\Repository\App\Ticket\TicketTypeRepository;
  22. use App\Repository\App\Ticket\TicketStateRepository;
  23. use App\Repository\App\Task\WorkerBudgetRepository;
  24. use App\Repository\App\RoleRepository;
  25. use App\Services\VendorService;
  26. use App\Services\UtilsService;
  27. use App\Entity\App\Task\Task;
  28. use App\Entity\App\User;
  29. use App\Entity\App\Role;
  31. class TaskPreSerializerSubscriber implements EventSubscriberInterface
  32. {
  33.     private $translator;
  34.     private $tokenStorage;
  35.     private $authorizationChecker;
  36.     private $ticketTypeRepository;
  37.     private $vendorService;
  38.     private $ticketStateRepository;
  39.     private $workerBudgetRepository;
  40.     private $roleRepository;
  41.     private $utilsService;
  43.     public function __construct(
  44.         TranslatorInterface $translator,
  45.         TokenStorageInterface $tokenStorage,
  46.         AuthorizationCheckerInterface $checker,
  47.         TicketTypeRepository $ticketTypeRepository,
  48.         TicketStateRepository $ticketStateRepository,
  49.         WorkerBudgetRepository $workerBudgetRepository,
  50.         RoleRepository $roleRepository,
  51.         VendorService $vendorService,
  52.         UtilsService $utilsService)
  53.     {
  54.         $this->translator = $translator;
  55.         $this->tokenStorage = $tokenStorage;
  56.         $this->authorizationChecker = $checker;
  57.         $this->ticketTypeRepository = $ticketTypeRepository;
  58.         $this->vendorService = $vendorService;
  59.         $this->ticketStateRepository = $ticketStateRepository;
  60.         $this->workerBudgetRepository = $workerBudgetRepository;
  61.         $this->roleRepository = $roleRepository;
  62.         $this->utilsService = $utilsService;
  63.     }
  65.     /**
  66.      * @param ViewEvent $event
  67.      * @throws AccessDeniedException
  68.      * @throws NotFoundException
  69.      * @throws \Doctrine\ORM\NonUniqueResultException
  70.      */
  71.     public function onKernelView(ViewEvent $event)
  72.     {
  73.         if ($this->utilsService->isAPublicRequest($event)) {
  74.             return;
  75.         }
  77.         $task = $event->getControllerResult();
  78.         $request = $event->getRequest();
  79.         $method = $request->getMethod();
  80.         $userCurrent = $this->tokenStorage->getToken()->getUser();
  82.         if (!($task instanceof Task) || (Request::METHOD_GET !== $method))
  83.             return;
  85.         if(!($userCurrent instanceof User)) {
  86.             throw new NotFoundException($this->translator->trans('User current not found'));
  87.         }
  89.         if ($this->authorizationChecker->isGranted('ROLE_SUPERADMIN'))
  90.             return;
  92.         $authorization = false;
  93.         $controlAccess = [Role::ROLE_ADMIN, Role::ROLE_TASKMASTER];
  94.         $vendor = $task->getTicket()->getVendor();
  96.         if ($task->getCreatedBy() === $userCurrent) {
  97.             $controlAccess = [Role::ROLE_ALL];
  98.         }
  100.         if ($this->vendorService->isUserRoleInToVendor($vendor, $userCurrent, $controlAccess)) {
  101.             $authorization = true;
  102.         }
  104.         if (!$authorization) {
  105.             $role[] = $this->roleRepository->findOneBy(['name' => Role::ROLE_TASKMASTER]);
  106.             $role[] = $this->roleRepository->findOneBy(['name' => Role::ROLE_OPERATOR]);
  107.             if ($this->workerBudgetRepository->findGroupByRoles($role, $task, $userCurrent->getId()))
  108.                 $authorization = true;
  109.         }
  111.         if (!$authorization) {
  112.             $controlAccessTranslator = [];
  113.             foreach ($controlAccess as $roleName) {
  114.                 $controlAccessTranslator[] = $this->translator->trans($roleName);
  115.             }
  116.             throw new AccessDeniedException(
  117.                 $this->translator->trans('access_allowed_only_for') . (implode(', ', $controlAccessTranslator))
  118.             );
  119.         }
  120.     }
  122.     public static function getSubscribedEvents()
  123.     {
  124.         return [
  125.             KernelEvents::VIEW => ['onKernelView', EventPriorities::PRE_SERIALIZE]
  126.         ];
  127.     }
  128. }