src/Security/StudentCourseAccessVoter.php line 15

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use App\Entity\Course;
  6. use App\Entity\Enrollment;
  7. use App\Entity\User;
  8. use App\Repository\EnrollmentRepository;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. /**
  13.  * Checks if a user is able to access a given course.
  14.  */
  15. class StudentCourseAccessVoter extends Voter
  16. {
  17.     private EnrollmentRepository $enrollmentRepository;
  19.     public function __construct(EnrollmentRepository $enrollmentRepository)
  20.     {
  21.         $this->enrollmentRepository = $enrollmentRepository;
  22.     }
  24.     protected function supports(string $attribute, $subject): bool
  25.     {
  26.         if (!$subject instanceof Course) {
  27.             return false;
  28.         }
  30.         return true;
  31.     }
  33.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  34.     {
  35.         $user = $token->getUser();
  36.         if (!$user instanceof User) {
  37.             // must be logged in
  38.             return false;
  39.         }
  41.         // confirmed $subject is a Course object, thanks to `supports()`
  42.         /** @var Course $course */
  43.         $course = $subject;
  45.         $enrollments = $this->enrollmentRepository->findBy(['student' => $user->getId()]);
  46.         $enrolledCourseIds = array_map(function(Enrollment $enrollment) {
  47.             return $enrollment->getModule()->getCourse()->getId();
  48.         }, $enrollments);
  50.         if (!in_array($course->getId(), $enrolledCourseIds)) {
  51.             return false;
  52.         }
  54.         return true;
  55.     }
  56. }