src/Voters/AppointmentVoter.php line 9

Open in your IDE?
  1. <?php
  3. namespace App\Voters;
  5. use App\Entity\Clinic\Appointment;
  6. use App\Entity\Person\User;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. class AppointmentVoter extends OrganisationVoter
  10. {
  11.     protected function supports($attribute, $subject)
  12.     {
  13.         return $subject instanceof Appointment && self::EDIT == $attribute;
  14.     }
  16.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  17.     {
  18.         /** @var User $user */
  19.         $user = $token->getUser();
  21.         if ($this->decisionManager->decide($token, [User::ROLE_SUB_CALENDAR_ACCESS])) {
  22.             if ($user->isSuperClinicAdmin()) {
  23.                 return parent::voteOnAttribute(self::VIEW, $subject->getClinic()->getOrganisation(), $token);
  24.             }
  26.             return $user->getClinic() === $subject->getClinic();
  27.         }
  29.         return false;
  30.     }
  31. }