src/Voters/PatientVoter.php line 8

Open in your IDE?
  1. <?php
  3. namespace App\Voters;
  5. use App\Entity\Person\Patient;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. class PatientVoter extends OrganisationVoter
  9. {
  10.     protected function supports($attribute, $subject = null)
  11.     {
  12.         if (!in_array($attribute, [self::VIEW, self::CREATE, self::EDIT])) {
  13.             return false;
  14.         }
  16.         if (!$subject instanceof Patient && $subject !== null) {
  17.             return false;
  18.         }
  20.         return true;
  21.     }
  23.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  24.     {
  25.         $user = $token->getUser();
  27.         switch ($attribute) {
  28.             case self::VIEW:
  29.                 if ($this->decisionManager->decide($token, ['ROLE_SUB_PATIENT_LIST'])) {
  30.                     return true;
  31.                 }
  33.                 break;
  34.             case self::CREATE:
  35.                 if ($this->decisionManager->decide($token, ['ROLE_SUB_PATIENT_PROFILE'])) {
  36.                     if ($user->isSuperClinicAdmin()) {
  37.                         return parent::voteOnAttribute(self::VIEW, $subject->getClinic()->getOrganisation(), $token);
  38.                     }
  40.                     return $user->getClinic() === $subject->getClinic() || $subject->getAllowedClinics()->contains($user->getClinic());
  41.                 }
  43.                 break;
  44.             case self::EDIT:
  45.                 if ($this->decisionManager->decide($token, ['ROLE_SUB_PATIENT_RECORD'])) {
  46.                     if ($user->isSuperClinicAdmin()) {
  47.                         return parent::voteOnAttribute(self::VIEW, $subject->getClinic()->getOrganisation(), $token);
  48.                     }
  50.                     return $user->getClinic() === $subject->getClinic();
  51.                 }
  53.                 break;
  54.         }
  56.         return false;
  57.     }
  58. }