src/Security/Voter/ServicesVoter.php line 15

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\User;
  6. use App\Entity\Organisation;
  7. use App\Entity\Service;
  8. use App\Entity\Subscription;
  9. use App\Repository\PlanRepository;
  10. use App\Service\Misc;
  11. use Symfony\Component\Security\Core\User\UserInterface;
  12. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  15. class ServicesVoter extends Voter
  16. {
  17.     private $planRepository;
  18.     private $misc;
  20.     const LEAKED_PASSWORDS = 'leaked-passwords';
  21.     const EXPOSED_SUB_DOMAINS = 'exposed-sub-domains';
  22.     const POTENTIAL_VULNERABILITIES = 'potential-vulnerabilities';
  23.     const EXPOSED_IPS_PORTS   = 'exposed-ips-and-ports';
  24.     const INTERNAL_ARCHITECTURE = 'internal-architecture';
  25.     const DARK_WEB_EXPOSURE = 'dark-web-exposure';
  27.     /**
  28.      * FormVoter constructor.
  29.      * @param PlanRepository $planRepository
  30.      * @param Misc $misc
  31.      */
  32.     public function __construct(PlanRepository $planRepository, Misc $misc)
  33.     {
  34.         $this->misc = $misc;
  35.         $this->planRepository = $planRepository;
  36.     }
  38.     protected function supports($attribute, $subject)
  39.     {
  40.         if (!in_array($attribute, [
  41.             self::LEAKED_PASSWORDS,
  42.             self::EXPOSED_SUB_DOMAINS,
  43.             self::POTENTIAL_VULNERABILITIES,
  44.             self::EXPOSED_IPS_PORTS,
  45.             self::INTERNAL_ARCHITECTURE,
  46.             self::DARK_WEB_EXPOSURE,
  47.         ])) {
  48.             return false;
  49.         }
  51.         return true;
  52.     }
  54.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  55.     {
  56.         if (!$subject instanceof Organisation) {
  57.             /**
  58.              * @var User $user
  59.              */
  60.             $user = $token->getUser();
  61.             // if the user is anonymous, do not grant access
  62.             if (!$user instanceof UserInterface || $user->isIsDeleted()) {
  63.                 return false;
  64.             }
  66.             /**
  67.              * @var Organisation $organisation
  68.              */
  69.             $organisation = $this->misc->getUserOrganisation($user);
  70.             if (!$organisation) {
  71.                 return false;
  72.             }
  73.         } else {
  74.             $organisation = $subject;
  75.         }
  77.         /**
  78.          * @var Subscription $sub
  79.          */
  80.         $sub = $this->misc->getActifSubsription($organisation);
  81.         
  82.         if ($sub) {
  83.             /**
  84.              * @var Service $sevice
  85.              */
  86.             foreach ($sub->getPlan()->getServices() as $service) {
  87.                 if ($service->getSlug() === $attribute) {
  88.                     return true;
  89.                 }
  90.             }
  91.         }
  93.         return false;
  94.     }
  95. }