src/Security/Voter/SpamAssassinVoter.php line 11

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  6. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  7. use Symfony\Component\Security\Core\User\UserInterface;
  8. use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
  9. use Symfony\Component\Security\Core\Security;
  11. class SpamAssassinVoter extends Voter
  12. {
  13.     private $security;
  14.     
  15.     public function __construct(Security $security)
  16.     {
  17.         $this->security = $security;
  18.     }
  19.     
  20.     protected function supports($attribute, $subject) : bool
  21.     {
  22.         return in_array($attribute, ['SPAMASSASSIN'])
  23.         && $subject instanceof \App\Model\UserPref;
  24.     }
  25.     
  26.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token) : bool
  27.     {
  28.         $user = $token->getUser();
  29.         // if the user is anonymous, do not grant access
  30.         if (!$user instanceof UserInterface) {
  31.             return false;
  32.         }
  33.         switch ($attribute) {   
  34.             case 'SPAMASSASSIN':
  35.                 if($this->security->isGranted('ROLE_POSTMASTER_MANY')) {
  36.                     if(preg_match('/^:/', $subject->getUsername())) {
  37.                         $subjUserDomainArr = explode('@', $subject->getUsername());
  38.                         
  39.                         if(sizeof($subjUserDomainArr) != 2) {
  40.                             return false;
  41.                         }
  42.                         
  43.                         foreach($user->getDomains() as $d) {
  44.                             if($subjUserDomainArr[1] == $d) {
  45.                                 return true;
  46.                             }
  47.                         }
  48.                         
  49.                     }
  50.                     elseif($subject->getUsername() == $user->getUsername()) {
  51.                         return true;
  52.                     }
  53.                 }
  54.                 elseif($this->security->isGranted('ROLE_POSTMASTER')) {
  55.                     if(preg_match('/^:/', $subject->getUsername())) {
  56.                         $subjUserDomainArr = explode('@', $subject->getUsername());
  57.                         $userDomainArr = explode('@', $user->getUsername());                        
  58.                         
  59.                         if(sizeof($subjUserDomainArr) != 2 || sizeof($userDomainArr) != 2) {
  60.                             return false;
  61.                         }
  62.                         
  63.                         if($userDomainArr[1] == $subjUserDomainArr[1]) {
  64.                             return true;
  65.                         }
  66.                     }
  67.                     elseif($subject->getUsername() == $user->getUsername()) {
  68.                         return true;
  69.                     }
  70.                 }
  71.                 elseif($this->security->isGranted('ROLE_USER')) {
  72.                     // only possible to edit his own account
  73.                     if($subject->getUsername() == $user->getUsername()) {
  74.                         return true;
  75.                     }
  76.                 }
  77.                 break;                
  78.         }
  79.         
  80.         return false;
  81.     }
  82. }