vendor/netgen/site-bundle/bundle/Security/Authorization/Voter/UserRegisterVoter.php line 17

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace Netgen\Bundle\SiteBundle\Security\Authorization\Voter;
  7. use Ibexa\Contracts\Core\Repository\PermissionResolver;
  8. use Ibexa\Core\MVC\Symfony\Security\Authorization\Attribute;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\HttpFoundation\RequestStack;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  14. /**
  15. * Provides access to ngsite_user_register route, even if user does not have access to user/login policy.
  16. */
  17. final class UserRegisterVoter implements VoterInterface
  18. {
  19. public function __construct(private PermissionResolver $permissionResolver, private RequestStack $requestStack) {}
  21. public function vote(TokenInterface $token, mixed $subject, array $attributes): int
  22. {
  23. foreach ($attributes as $attribute) {
  24. if (!$this->supportsAttribute($attribute)) {
  25. continue;
  26. }
  28. if ($this->permissionResolver->hasAccess('user', 'register') === true) {
  29. return VoterInterface::ACCESS_GRANTED;
  30. }
  32. return VoterInterface::ACCESS_DENIED;
  33. }
  35. return VoterInterface::ACCESS_ABSTAIN;
  36. }
  38. private function supportsAttribute(mixed $attribute): bool
  39. {
  40. if (!$attribute instanceof Attribute) {
  41. return false;
  42. }
  44. $request = $this->requestStack->getMainRequest();
  45. if (!$request instanceof Request) {
  46. return false;
  47. }
  49. if ($request->attributes->get('_route') !== 'ngsite_user_register') {
  50. return false;
  51. }
  53. return $attribute->module === 'user' && $attribute->function === 'login';
  54. }
  55. }